@itpay/cli 2.1.50 → 2.1.53

package/dist/src/main.js

@@ -4453,7 +4453,7 @@ var require_browser = __commonJS({
     var QRCode2 = require_qrcode();
     var CanvasRenderer = require_canvas();
     var SvgRenderer = require_svg_tag();
-    function renderCanvas(renderFunc, canvas, text, opts, cb) {
+    function renderCanvas(renderFunc, canvas, text2, opts, cb) {
       const args = [].slice.call(arguments, 1);
       const argsNum = args.length;
       const isLastArgCb = typeof args[argsNum - 1] === "function";
@@ -4465,8 +4465,8 @@ var require_browser = __commonJS({
           throw new Error("Too few arguments provided");
         }
         if (argsNum === 2) {
-          cb = text;
-          text = canvas;
+          cb = text2;
+          text2 = canvas;
           canvas = opts = void 0;
         } else if (argsNum === 3) {
           if (canvas.getContext && typeof cb === "undefined") {
@@ -4474,8 +4474,8 @@ var require_browser = __commonJS({
             opts = void 0;
           } else {
             cb = opts;
-            opts = text;
-            text = canvas;
+            opts = text2;
+            text2 = canvas;
             canvas = void 0;
           }
         }
@@ -4484,16 +4484,16 @@ var require_browser = __commonJS({
           throw new Error("Too few arguments provided");
         }
         if (argsNum === 1) {
-          text = canvas;
+          text2 = canvas;
           canvas = opts = void 0;
         } else if (argsNum === 2 && !canvas.getContext) {
-          opts = text;
-          text = canvas;
+          opts = text2;
+          text2 = canvas;
           canvas = void 0;
         }
         return new Promise(function(resolve8, reject) {
           try {
-            const data = QRCode2.create(text, opts);
+            const data = QRCode2.create(text2, opts);
             resolve8(renderFunc(data, canvas, opts));
           } catch (e) {
             reject(e);
@@ -4501,7 +4501,7 @@ var require_browser = __commonJS({
         });
       }
       try {
-        const data = QRCode2.create(text, opts);
+        const data = QRCode2.create(text2, opts);
         cb(null, renderFunc(data, canvas, opts));
       } catch (e) {
         cb(e);
@@ -4526,8 +4526,8 @@ var require_server = __commonJS({
     var Utf8Renderer = require_utf8();
     var TerminalRenderer = require_terminal2();
     var SvgRenderer = require_svg();
-    function checkParams(text, opts, cb) {
-      if (typeof text === "undefined") {
+    function checkParams(text2, opts, cb) {
+      if (typeof text2 === "undefined") {
         throw new Error("String required as first argument");
       }
       if (typeof cb === "undefined") {
@@ -4578,11 +4578,11 @@ var require_server = __commonJS({
       }
     }
     __name(getStringRendererFromType, "getStringRendererFromType");
-    function render(renderFunc, text, params) {
+    function render(renderFunc, text2, params) {
       if (!params.cb) {
         return new Promise(function(resolve8, reject) {
           try {
-            const data = QRCode2.create(text, params.opts);
+            const data = QRCode2.create(text2, params.opts);
             return renderFunc(data, params.opts, function(err, data2) {
               return err ? reject(err) : resolve8(data2);
             });
@@ -4592,7 +4592,7 @@ var require_server = __commonJS({
         });
       }
       try {
-        const data = QRCode2.create(text, params.opts);
+        const data = QRCode2.create(text2, params.opts);
         return renderFunc(data, params.opts, params.cb);
       } catch (e) {
         params.cb(e);
@@ -4601,43 +4601,43 @@ var require_server = __commonJS({
     __name(render, "render");
     exports.create = QRCode2.create;
     exports.toCanvas = require_browser().toCanvas;
-    exports.toString = /* @__PURE__ */ __name(function toString(text, opts, cb) {
-      const params = checkParams(text, opts, cb);
+    exports.toString = /* @__PURE__ */ __name(function toString(text2, opts, cb) {
+      const params = checkParams(text2, opts, cb);
       const type = params.opts ? params.opts.type : void 0;
       const renderer = getStringRendererFromType(type);
-      return render(renderer.render, text, params);
+      return render(renderer.render, text2, params);
     }, "toString");
-    exports.toDataURL = /* @__PURE__ */ __name(function toDataURL(text, opts, cb) {
-      const params = checkParams(text, opts, cb);
+    exports.toDataURL = /* @__PURE__ */ __name(function toDataURL(text2, opts, cb) {
+      const params = checkParams(text2, opts, cb);
       const renderer = getRendererFromType(params.opts.type);
-      return render(renderer.renderToDataURL, text, params);
+      return render(renderer.renderToDataURL, text2, params);
     }, "toDataURL");
-    exports.toBuffer = /* @__PURE__ */ __name(function toBuffer(text, opts, cb) {
-      const params = checkParams(text, opts, cb);
+    exports.toBuffer = /* @__PURE__ */ __name(function toBuffer(text2, opts, cb) {
+      const params = checkParams(text2, opts, cb);
       const renderer = getRendererFromType(params.opts.type);
-      return render(renderer.renderToBuffer, text, params);
+      return render(renderer.renderToBuffer, text2, params);
     }, "toBuffer");
-    exports.toFile = /* @__PURE__ */ __name(function toFile(path3, text, opts, cb) {
-      if (typeof path3 !== "string" || !(typeof text === "string" || typeof text === "object")) {
+    exports.toFile = /* @__PURE__ */ __name(function toFile(path3, text2, opts, cb) {
+      if (typeof path3 !== "string" || !(typeof text2 === "string" || typeof text2 === "object")) {
         throw new Error("Invalid argument");
       }
       if (arguments.length < 3 && !canPromise()) {
         throw new Error("Too few arguments provided");
       }
-      const params = checkParams(text, opts, cb);
+      const params = checkParams(text2, opts, cb);
       const type = params.opts.type || getTypeFromFilename(path3);
       const renderer = getRendererFromType(type);
       const renderToFile = renderer.renderToFile.bind(null, path3);
-      return render(renderToFile, text, params);
+      return render(renderToFile, text2, params);
     }, "toFile");
-    exports.toFileStream = /* @__PURE__ */ __name(function toFileStream(stream, text, opts) {
+    exports.toFileStream = /* @__PURE__ */ __name(function toFileStream(stream, text2, opts) {
       if (arguments.length < 2) {
         throw new Error("Too few arguments provided");
       }
-      const params = checkParams(text, opts, stream.emit.bind(stream, "error"));
+      const params = checkParams(text2, opts, stream.emit.bind(stream, "error"));
       const renderer = getRendererFromType("png");
       const renderToFileStream = renderer.renderToFileStream.bind(null, stream);
-      render(renderToFileStream, text, params);
+      render(renderToFileStream, text2, params);
     }, "toFileStream");
   }
 });
@@ -7581,7 +7581,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {(string | Function)} text - string to add, or a function returning a string
        * @return {Command} `this` command for chaining
        */
-      addHelpText(position, text) {
+      addHelpText(position, text2) {
         const allowedValues = ["beforeAll", "before", "after", "afterAll"];
         if (!allowedValues.includes(position)) {
           throw new Error(`Unexpected value for position to addHelpText.
@@ -7590,10 +7590,10 @@ Expecting one of '${allowedValues.join("', '")}'`);
         const helpEvent = `${position}Help`;
         this.on(helpEvent, (context) => {
           let helpStr;
-          if (typeof text === "function") {
-            helpStr = text({ error: context.error, command: context.command });
+          if (typeof text2 === "function") {
+            helpStr = text2({ error: context.error, command: context.command });
           } else {
-            helpStr = text;
+            helpStr = text2;
           }
           if (helpStr) {
             context.write(`${helpStr}
@@ -7673,6 +7673,25 @@ var require_commander = __commonJS({
   }
 });
 
+// src/services/shared/purchase_contract.generated.ts
+var purchaseContract = {
+  "version": "itpay.purchase-confirmation.v1",
+  "required": [
+    "review_ref",
+    "request_key",
+    "user_approved",
+    "user_answer",
+    "price_policy"
+  ],
+  "request_key_max_utf16_units": 200,
+  "amount_maximum": 9007199254740991,
+  "modes": {
+    "exact": "amount_minor",
+    "capped": "maximum_minor",
+    "confirm_on_official_page": null
+  }
+};
+
 // src/client/transport.ts
 var HttpTransportError = class extends Error {
   constructor(code, attempts, causeCode, cause) {
@@ -7879,7 +7898,7 @@ var HttpClient = class _HttpClient {
       if (options.bearer) headers.Authorization = `Bearer ${options.bearer}`;
       if (options.idempotencyKey) headers["Idempotency-Key"] = options.idempotencyKey;
       let response;
-      let text;
+      let text2;
       try {
         response = await this.fetchImpl(url, {
           method,
@@ -7894,7 +7913,7 @@ var HttpClient = class _HttpClient {
           requestID = headerID;
           diagnostic.request_id = headerID;
         }
-        text = await response.text();
+        text2 = await response.text();
         this.localSimulation = response.headers.get("X-ItPay-Environment") === "local_simulation";
       } catch (error2) {
         if (options.signal?.aborted) {
@@ -7912,7 +7931,7 @@ var HttpClient = class _HttpClient {
         throw asTransientTransportError(error2, transportRetries + 1) ?? error2;
       }
       record(response.ok ? void 0 : `HTTP_${response.status}`);
-      const parsed = text.length > 0 ? safeParseJson(text) : void 0;
+      const parsed = text2.length > 0 ? safeParseJson(text2) : void 0;
       if (response.ok) return parsed;
       const error = new HttpError(response.status, parsed, `HTTP ${response.status}`);
       if (!authorizationRecovered && error.status === 401 && error.code === "agent_device_session_required" && this.recoverAuthorization) {
@@ -7956,9 +7975,9 @@ function safeRouteTemplate(path3) {
   return path3.split("/").map((segment) => staticSegments.has(segment) ? segment : segment ? "{value}" : "").join("/");
 }
 __name(safeRouteTemplate, "safeRouteTemplate");
-function safeParseJson(text) {
+function safeParseJson(text2) {
   try {
-    return JSON.parse(text);
+    return JSON.parse(text2);
   } catch {
     return void 0;
   }
@@ -8232,10 +8251,10 @@ async function streamSSE(url, onEvent, signal) {
     signal
   });
   if (!response.ok) {
-    const text = await response.text();
+    const text2 = await response.text();
     let msg = `SSE stream failed: HTTP ${response.status}`;
     try {
-      const parsed = JSON.parse(text);
+      const parsed = JSON.parse(text2);
       msg = parsed.message || parsed.code || msg;
     } catch {
     }
@@ -8373,9 +8392,9 @@ function readRegular(path3) {
   }
 }
 __name(readRegular, "readRegular");
-function writeComplete(path3, text, createOnly) {
+function writeComplete(path3, text2, createOnly) {
   const temp = `${path3}.${randomUUID2()}.tmp`;
-  writeFileSync2(temp, text, { flag: "wx", mode: 384 });
+  writeFileSync2(temp, text2, { flag: "wx", mode: 384 });
   try {
     if (createOnly) {
       try {
@@ -8452,12 +8471,12 @@ var DeviceSessionCache = class {
   }
   read() {
     const before = this.generation(false);
-    const text = readRegular(this.cachePath);
-    if (text === void 0) return void 0;
+    const text2 = readRegular(this.cachePath);
+    if (text2 === void 0) return void 0;
     if (before === void 0) throw invalid2("DEVICE_CACHE_GENERATION_MISSING");
     let record;
     try {
-      record = JSON.parse(text);
+      record = JSON.parse(text2);
     } catch {
       throw invalid2("DEVICE_CACHE_CORRUPT");
     }
@@ -8470,11 +8489,11 @@ var DeviceSessionCache = class {
   }
   registrationHint() {
     this.checkDirectory();
-    const text = readRegular(this.cachePath);
-    if (text === void 0) return void 0;
+    const text2 = readRegular(this.cachePath);
+    if (text2 === void 0) return void 0;
     let record;
     try {
-      record = JSON.parse(text);
+      record = JSON.parse(text2);
     } catch {
       throw invalid2("DEVICE_CACHE_CORRUPT");
     }
@@ -8502,9 +8521,9 @@ function deviceCacheAgentTypes(directory, backend, keyThumbprint) {
   }
   const types = /* @__PURE__ */ new Set();
   for (const file of files.filter((name) => /^[0-9a-f]{64}\.(json|generation)$/.test(name))) {
-    const text = readRegular(join(directory, file));
-    if (text === void 0) continue;
-    const value = JSON.parse(text);
+    const text2 = readRegular(join(directory, file));
+    if (text2 === void 0) continue;
+    const value = JSON.parse(text2);
     if (value?.backend !== backend || value?.keyThumbprint !== keyThumbprint) continue;
     const marker = file.endsWith(".generation");
     if (value.schemaVersion !== (marker ? "itpay.device-generation.v1" : "itpay.device-session.v1")) throw invalid2("DEVICE_CACHE_CORRUPT");
@@ -9042,7 +9061,10 @@ __name(isOperationID, "isOperationID");
 // src/state/config.ts
 var DEFAULT_BASE_URL = "https://app.itpay.ai";
 var DEV_BASE_URL = "https://dev.itpay.ai";
+var V4_DEV_BASE_URL = "https://v4-dev.itpay.ai";
 var SANDBOX_BASE_URL = "https://sandbox.itpay.ai";
+var TEST_BASE_URL = "https://app-test.itpay.ai";
+var OFFICIAL_BACKEND_URLS = [DEFAULT_BASE_URL, SANDBOX_BASE_URL, DEV_BASE_URL, TEST_BASE_URL, V4_DEV_BASE_URL];
 var CART_SESSION_DEFAULT_DIR = ".itpay-v3";
 var CART_SESSION_FILENAME = "cart.json";
 var OPERATION_JOURNAL_FILENAME = "operations.json";
@@ -9059,15 +9081,15 @@ var BackendOverrideError = class extends Error {
   }
   code = "backend_override_forbidden";
   constructor() {
-    super(`ITPAY_BACKEND_URL only supports ${DEFAULT_BASE_URL}, ${SANDBOX_BASE_URL}, or ${DEV_BASE_URL}`);
+    super(`ITPAY_BACKEND_URL only supports ${OFFICIAL_BACKEND_URLS.join(", ")}`);
     this.name = "BackendOverrideError";
   }
 };
 function resolveBackendURL(env = process.env) {
   const requested = env.ITPAY_BACKEND_URL?.trim();
-  if (!requested || requested === DEFAULT_BASE_URL || requested === `${DEFAULT_BASE_URL}/`) return DEFAULT_BASE_URL;
-  if (requested === SANDBOX_BASE_URL || requested === `${SANDBOX_BASE_URL}/`) return SANDBOX_BASE_URL;
-  if (requested === DEV_BASE_URL || requested === `${DEV_BASE_URL}/`) return DEV_BASE_URL;
+  if (!requested) return DEFAULT_BASE_URL;
+  const official = OFFICIAL_BACKEND_URLS.find((origin) => requested === origin || requested === `${origin}/`);
+  if (official) return official;
   if (env.ITPAY_CLI_DEV === "1" && /^http:\/\/(localhost|127\.0\.0\.1):\d+\/?$/.test(requested)) return requested.replace(/\/$/, "");
   throw new BackendOverrideError();
 }
@@ -9244,20 +9266,20 @@ function writeCommandEnvelope(value, options = {}) {
 `);
     }
   } else {
-    for (const [key, fact] of Object.entries(facts)) {
-      for (const line of plainValueLines(fact, key)) out(`${line}
+    for (const [key, fact2] of Object.entries(facts)) {
+      for (const line of plainValueLines(fact2, key)) out(`${line}
 `);
     }
     if ("error" in qualified && qualified.result) {
-      for (const [key, fact] of Object.entries(qualified.result)) {
-        for (const line of plainValueLines(fact, key)) out(`${line}
+      for (const [key, fact2] of Object.entries(qualified.result)) {
+        for (const line of plainValueLines(fact2, key)) out(`${line}
 `);
       }
     }
   }
   if ("handoff" in qualified && qualified.handoff) {
-    for (const [key, fact] of Object.entries(qualified.handoff)) {
-      for (const line of plainValueLines(fact, `handoff.${key}`)) out(`${line}
+    for (const [key, fact2] of Object.entries(qualified.handoff)) {
+      for (const line of plainValueLines(fact2, `handoff.${key}`)) out(`${line}
 `);
     }
   }
@@ -9383,8 +9405,8 @@ function purchaseEnvelope(state) {
   const review = state.review;
   return {
     status: state.status,
-    result: { service_execution_id: id, completed_stage: state.completed_stage, ...state.auto_wait_remaining_ms !== void 0 ? { auto_wait_remaining_ms: state.auto_wait_remaining_ms } : {}, effects: state.effects, ...review ? { summary: review.summary, price_kind: review.binding.price_kind, review_expires_at: review.binding.expires_at, input_template: fileInputTemplate(`itpay services purchase ${id} --input-json <purchase-confirmation.json> --json`, { ...review.confirmation_template }, ["user_approved", "user_answer", ...review.confirmation_template.price_policy.mode === "" ? ["price_policy"] : []], { executionID: id }) } : {} },
-    instruction: review ? `${state.status === "confirmation_changed" ? "\u8D2D\u4E70\u6761\u4EF6\u53D1\u751F\u53D8\u5316\uFF0C\u53EA\u8865\u5145\u5BF9\u53D8\u5316\u7684\u771F\u5B9E\u786E\u8BA4\u3002" : "\u6838\u5BF9\u5F53\u524D\u5BF9\u8C61\u3001\u6570\u91CF\u3001\u91D1\u989D\u4E0E\u6761\u6B3E\u3002"}\u5DF2\u6709\u660E\u786E\u540C\u610F\u4E14\u8986\u76D6\u8FD9\u4E9B\u6761\u4EF6\u65F6\u6CBF\u7528\uFF1B\u5426\u5219\u4EC5\u8865\u7F3A\u5931\u540C\u610F\u3002\u5C06\u5B8C\u6574 file_content \u5199\u5165\u6587\u4EF6\uFF0C\u586B\u5199\u771F\u5B9E\u56DE\u7B54\u548C\u660E\u786E\u4EF7\u683C\u7B56\u7565\u540E\u6267\u884C\u6A21\u677F\u3002\u672C\u6B65\u9AA4\u53EA\u751F\u6210\u5B98\u65B9\u586B\u5199\u4E0E\u4ED8\u6B3E\u9875\u9762\uFF0C\u4E0D\u53D1\u8D77\u652F\u4ED8\u3002\u672A\u77E5\u4EF7\u683C\u4E0D\u5F97\u9ED8\u8BA4\u6539\u6210\u5B98\u65B9\u9875\u786E\u8BA4\u3002` : state.status === "running" && state.auto_wait_remaining_ms === 0 ? "\u81EA\u52A8\u7B49\u5F85\u5DF2\u8FBE\u5230120\u79D2\u4E0A\u9650\uFF0C\u5DF2\u505C\u6B62\u3002\u539F\u786E\u8BA4\u548C\u539F\u8D2D\u4E70\u4FDD\u7559\uFF1B\u62A5\u544A completed_stage\uFF0C\u7528\u6237\u660E\u786E\u8981\u6C42\u6062\u590D\u65F6\u4F7F\u7528 recovery \u4E2D\u7684\u539F\u5355\u547D\u4EE4\uFF0C\u4E0D\u81EA\u52A8\u91CD\u542F\u7B49\u5F85\u3002" : state.status === "running" ? "\u5DF2\u4FDD\u5B58\u539F\u786E\u8BA4\uFF0C\u5F53\u524D\u5B8C\u6210\u9636\u6BB5\u89C1 completed_stage\u3002\u4FDD\u7559\u540C\u4E00\u4EFB\u52A1\u7EE7\u7EED\u6709\u754C\u7B49\u5F85\uFF1B\u4E0D\u8981\u6C42\u7528\u6237\u8BF4\u7EE7\u7EED\u3002\u7D2F\u8BA1120\u79D2\u4ECD\u672A\u5B8C\u6210\u65F6\u505C\u6B62\u81EA\u52A8\u7B49\u5F85\u5E76\u62A5\u544A\u539F\u8FDB\u5EA6\uFF0C\u4E0D\u521B\u5EFA\u66FF\u4EE3\u8D2D\u4E70\u3002" : state.status === "expired" ? "\u539F\u786E\u8BA4\u6216\u62A5\u4EF7\u5DF2\u5230\u671F\uFF0C\u4E0D\u80FD\u6CBF\u7528\u8FC7\u671F\u5165\u53E3\uFF1B\u4FDD\u7559\u539F\u8D2D\u4E70\u5E76\u6838\u5BF9\u5F53\u524D\u72B6\u6001\uFF0C\u4ED8\u6B3E\u672A\u77E5\u4E0D\u91CD\u5EFA\u3002" : "\u5F53\u524D\u8D2D\u4E70\u672A\u80FD\u7EE7\u7EED\uFF1B\u4FDD\u7559\u539F\u6267\u884C\uFF0C\u6309\u5F53\u524D\u539F\u56E0\u5904\u7406\uFF0C\u4E0D\u91CD\u5EFA\u8D2D\u4E70\u6216\u731C\u6D4B\u7ED3\u679C\u3002",
+    result: { service_execution_id: id, completed_stage: state.completed_stage, ...state.auto_wait_remaining_ms !== void 0 ? { auto_wait_remaining_ms: state.auto_wait_remaining_ms } : {}, effects: state.effects, ...review ? { summary: review.summary, allowed_modes: review.allowed_modes, confirmation_schema: review.confirmation_schema, price_kind: review.binding.price_kind, review_expires_at: review.binding.expires_at, input_template: fileInputTemplate(`itpay services purchase ${id} --input-json <purchase-confirmation.json> --json`, { ...review.confirmation_template }, ["user_approved", "user_answer", ...review.confirmation_template.price_policy.mode === "" ? ["price_policy"] : []], { executionID: id }) } : {} },
+    instruction: review ? `${state.status === "confirmation_changed" ? "\u8D2D\u4E70\u6761\u4EF6\u53D1\u751F\u53D8\u5316\uFF0C\u53EA\u8865\u5145\u5BF9\u53D8\u5316\u7684\u771F\u5B9E\u786E\u8BA4\u3002" : "\u6838\u5BF9\u5F53\u524D\u5BF9\u8C61\u3001\u6570\u91CF\u3001\u91D1\u989D\u4E0E\u6761\u6B3E\u3002"}\u5DF2\u6709\u660E\u786E\u540C\u610F\u4E14\u8986\u76D6\u8FD9\u4E9B\u6761\u4EF6\u65F6\u6CBF\u7528\uFF1B\u5426\u5219\u4EC5\u8865\u7F3A\u5931\u540C\u610F\u3002\u5C06\u5B8C\u6574 file_content \u5199\u5165\u6587\u4EF6\uFF0C\u586B\u5199\u771F\u5B9E\u56DE\u7B54\u548C\u660E\u786E\u4EF7\u683C\u7B56\u7565\u540E\u6267\u884C\u6A21\u677F\u3002\u672C\u6B65\u9AA4\u7684\u6548\u679C\u4EE5 effects \u548C\u5F53\u524D\u670D\u52A1\u5408\u540C\u4E3A\u51C6\uFF1B\u4E0D\u53D1\u8D77\u652F\u4ED8\u4E0D\u80FD\u63A8\u65AD\u6CA1\u6709\u8BA2\u5355\u6216\u5E93\u5B58\u6548\u679C\u3002\u5BBF\u4E3B\u539F\u751F\u6279\u51C6\u4E0E\u4E1A\u52A1\u540C\u610F\u5206\u522B\u4FDD\u7559\u3002\u672A\u77E5\u4EF7\u683C\u4E0D\u5F97\u9ED8\u8BA4\u6539\u6210\u5B98\u65B9\u9875\u786E\u8BA4\u3002` : state.status === "running" && state.auto_wait_remaining_ms === 0 ? "\u81EA\u52A8\u7B49\u5F85\u5DF2\u8FBE\u5230120\u79D2\u4E0A\u9650\uFF0C\u5DF2\u505C\u6B62\u3002\u539F\u786E\u8BA4\u548C\u539F\u8D2D\u4E70\u4FDD\u7559\uFF1B\u62A5\u544A completed_stage\uFF0C\u7528\u6237\u660E\u786E\u8981\u6C42\u6062\u590D\u65F6\u4F7F\u7528 recovery \u4E2D\u7684\u539F\u5355\u547D\u4EE4\uFF0C\u4E0D\u81EA\u52A8\u91CD\u542F\u7B49\u5F85\u3002" : state.status === "running" ? "\u5DF2\u4FDD\u5B58\u539F\u786E\u8BA4\uFF0C\u5F53\u524D\u5B8C\u6210\u9636\u6BB5\u89C1 completed_stage\u3002\u4FDD\u7559\u540C\u4E00\u4EFB\u52A1\u7EE7\u7EED\u6709\u754C\u7B49\u5F85\uFF1B\u4E0D\u8981\u6C42\u7528\u6237\u8BF4\u7EE7\u7EED\u3002\u7D2F\u8BA1120\u79D2\u4ECD\u672A\u5B8C\u6210\u65F6\u505C\u6B62\u81EA\u52A8\u7B49\u5F85\u5E76\u62A5\u544A\u539F\u8FDB\u5EA6\uFF0C\u4E0D\u521B\u5EFA\u66FF\u4EE3\u8D2D\u4E70\u3002" : state.status === "expired" ? "\u539F\u786E\u8BA4\u6216\u62A5\u4EF7\u5DF2\u5230\u671F\uFF0C\u4E0D\u80FD\u6CBF\u7528\u8FC7\u671F\u5165\u53E3\uFF1B\u4FDD\u7559\u539F\u8D2D\u4E70\u5E76\u6838\u5BF9\u5F53\u524D\u72B6\u6001\uFF0C\u4ED8\u6B3E\u672A\u77E5\u4E0D\u91CD\u5EFA\u3002" : "\u5F53\u524D\u8D2D\u4E70\u672A\u80FD\u7EE7\u7EED\uFF1B\u4FDD\u7559\u539F\u6267\u884C\uFF0C\u6309\u5F53\u524D\u539F\u56E0\u5904\u7406\uFF0C\u4E0D\u91CD\u5EFA\u8D2D\u4E70\u6216\u731C\u6D4B\u7ED3\u679C\u3002",
     next: state.status === "running" && state.auto_wait_remaining_ms !== 0 ? resume : null,
     recovery: state.status === "running" && state.auto_wait_remaining_ms === 0 ? [{ ...resume, reason: "\u4EC5\u7528\u6237\u660E\u786E\u8981\u6C42\u7EE7\u7EED\u65F6\u6062\u590D\u539F\u8D2D\u4E70\uFF1B\u4E0D\u81EA\u52A8\u91CD\u542F\u7B49\u5F85" }] : state.status === "blocked" || state.status === "expired" ? [{ command: `itpay services next ${id} --json`, reason: "\u8BFB\u53D6\u539F\u6267\u884C\u7684\u5F53\u524D\u4E8B\u5B9E\u4E0E\u5B8C\u6574\u6062\u590D\u52A8\u4F5C\uFF1B\u4E0D\u65B0\u5EFA\u8D2D\u4E70" }] : []
   };
@@ -9436,6 +9458,7 @@ function defaultHostForAgentType(agentType) {
   const normalized = agentType?.trim().toLowerCase() ?? "";
   if (normalized === "codex-desktop") return "codex";
   if (normalized === "claude-code-desktop") return "claude-code";
+  if (normalized === "dot" || normalized === "muse" || normalized === "hermes") return "plain-chat";
   if (normalized === "workbuddy") return "plain-chat";
   if (normalized === "zcode") return "plain-chat";
   if (normalized === "doubao-work") return "plain-chat";
@@ -9515,228 +9538,6 @@ function hostCapabilities(host) {
 }
 __name(hostCapabilities, "hostCapabilities");
 
-// src/render/telegram.ts
-function buttonsFor(plan) {
-  if (plan.kind === "payment_qr" && plan.paymentIntentID) {
-    return [
-      { label: "\u652F\u4ED8\u9047\u5230\u95EE\u9898 / \u5237\u65B0", kind: "callback", intent: "refresh_payment_qr", ref: plan.paymentIntentID },
-      { label: "\u6211\u5DF2\u4ED8\u6B3E\uFF0C\u67E5\u8BE2\u72B6\u6001", kind: "callback", intent: "check_payment_status", ref: plan.paymentIntentID }
-    ];
-  }
-  if (plan.kind === "auth_qr" && plan.checkoutID) {
-    return [
-      { label: "\u6253\u5F00\u6388\u6743\u9875\u9762", kind: "url", url: plan.url },
-      { label: "\u67E5\u8BE2\u6388\u6743\u72B6\u6001", kind: "callback", intent: "check_checkout_status", ref: plan.checkoutID }
-    ];
-  }
-  return [
-    { label: "\u{1F4F1} \u624B\u673A\u70B9\u8FD9\u513F\u652F\u4ED8", kind: "url", url: plan.url },
-    ...plan.checkoutID ? [{ label: "\u{1F4CB} \u5DF2\u6388\u6743\u7ED9\u6211\u8BFB", kind: "callback", intent: "grant_confirmed", ref: plan.checkoutID }] : []
-  ];
-}
-__name(buttonsFor, "buttonsFor");
-function nativeButton(button) {
-  if (button.kind === "url") {
-    return { label: button.label, url: button.url ?? "" };
-  }
-  const value = button.intent === "check_checkout_status" ? `itp:checkout:${button.ref ?? ""}` : `itp:${button.intent ?? "callback"}:${button.ref ?? ""}`;
-  return { label: button.label, value };
-}
-__name(nativeButton, "nativeButton");
-function renderTelegram(plan, options) {
-  const out = options.output ?? ((line) => process.stdout.write(line));
-  const agentAction = buildOpenClawTelegramAction(plan, options.target);
-  const presentation = agentAction.arguments.presentation;
-  const media = collectTelegramMedia(plan);
-  const text = agentAction.arguments.message;
-  const openclawMessage = {
-    command: [
-      "openclaw",
-      "message",
-      "send",
-      "--channel",
-      "telegram",
-      "--target",
-      options.target,
-      "--message",
-      text,
-      ...media.length > 0 ? ["--media", media[0].url] : [],
-      "--presentation",
-      JSON.stringify(presentation)
-    ],
-    // Keep the same Checkout visible if native buttons are unavailable.
-    if_unavailable: "If `openclaw message send` is unavailable, send the same QR media and Checkout URL as ordinary Telegram content, report that inline buttons are unavailable, and stop. Do not create another Checkout."
-  };
-  out(JSON.stringify({ presentation, agent_action: agentAction, openclaw_message: openclawMessage }, null, 2) + "\n");
-}
-__name(renderTelegram, "renderTelegram");
-function buildOpenClawTelegramAction(plan, target2) {
-  const buttons = buttonsFor(plan).map(nativeButton);
-  const media = collectTelegramMedia(plan);
-  const message = plan.kind === "payment_qr" ? `ItPay payment QR \u2014 ${plan.summary}` : plan.kind === "auth_qr" ? `ItPay auth required \u2014 ${plan.summary}` : `ItPay checkout QR \u2014 ${plan.summary}`;
-  const presentation = {
-    blocks: [{ type: "buttons", buttons }]
-  };
-  const nativeTarget = target2.trim().replace(/^telegram:/i, "");
-  return {
-    tool: "message",
-    arguments: {
-      action: "send",
-      channel: "telegram",
-      target: nativeTarget,
-      message,
-      ...media[0]?.url ? { media: media[0].url } : {},
-      presentation
-    }
-  };
-}
-__name(buildOpenClawTelegramAction, "buildOpenClawTelegramAction");
-function collectTelegramMedia(plan) {
-  const media = (plan.platform.media ?? []).map((item) => ({
-    url: item.url,
-    mimeType: item.mimeType ?? "image/png"
-  }));
-  if (plan.kind === "payment_qr" || media.length === 0) {
-    media.unshift({
-      url: plan.preferredQRSources.find((src) => src.length > 0) ?? plan.url,
-      mimeType: "image/png"
-    });
-  }
-  return media;
-}
-__name(collectTelegramMedia, "collectTelegramMedia");
-
-// src/render/checkout_handoff.ts
-function shouldPrepareLocalCheckoutImage(platform2) {
-  return platform2 === "markdown";
-}
-__name(shouldPrepareLocalCheckoutImage, "shouldPrepareLocalCheckoutImage");
-function isWorkBuddyPlainChat(agentType, platform2) {
-  return agentType?.trim().toLowerCase() === "workbuddy" && platform2 === "plain_chat";
-}
-__name(isWorkBuddyPlainChat, "isWorkBuddyPlainChat");
-function isZCodePlainChat(agentType, platform2) {
-  return agentType?.trim().toLowerCase() === "zcode" && platform2 === "plain_chat";
-}
-__name(isZCodePlainChat, "isZCodePlainChat");
-function isLinkOnlyBrowserAgent(agentType, platform2) {
-  return isWorkBuddyPlainChat(agentType, platform2) || isZCodePlainChat(agentType, platform2);
-}
-__name(isLinkOnlyBrowserAgent, "isLinkOnlyBrowserAgent");
-function buildWorkBuddyPresentFilesAction(url) {
-  return {
-    tool: "present_files",
-    arguments: { files: [url] }
-  };
-}
-__name(buildWorkBuddyPresentFilesAction, "buildWorkBuddyPresentFilesAction");
-function hasCompleteCheckoutTokens(url) {
-  if (!url) {
-    return false;
-  }
-  try {
-    const parsed = new URL(url);
-    return Boolean(parsed.searchParams.get("display_token") && parsed.searchParams.get("complete_exchange_token"));
-  } catch {
-    return false;
-  }
-}
-__name(hasCompleteCheckoutTokens, "hasCompleteCheckoutTokens");
-function buildCheckoutHandoff(input) {
-  const url = input.plan?.localSimulation && input.mobileUrl && hasCompleteCheckoutTokens(input.mobileUrl) ? input.mobileUrl : input.url;
-  const handoff = { url, ...input.plan?.localSimulation ? { environment: "local_simulation", query: "live", transactions: "simulated" } : {} };
-  const mobileUrl = !input.plan?.localSimulation && hasCompleteCheckoutTokens(input.mobileUrl) ? input.mobileUrl : void 0;
-  if (mobileUrl) {
-    handoff.mobile_url = mobileUrl;
-  }
-  const workBuddyAction = isWorkBuddyPlainChat(input.agentType, input.platform);
-  if (workBuddyAction) {
-    handoff.agent_action = buildWorkBuddyPresentFilesAction(url);
-  }
-  if (input.platform === "markdown") {
-    if (input.localPath) handoff.qr_local_path = input.localPath;
-    if (input.markdown) handoff.markdown = input.markdown;
-  } else if (input.platform === "plain_chat" && input.qrImageURL && !isLinkOnlyBrowserAgent(input.agentType, input.platform)) {
-    handoff.qr_image_url = input.qrImageURL;
-  } else if (input.platform === "telegram" && input.qrImageURL) {
-    handoff.qr_image_url = input.qrImageURL;
-  }
-  if (input.agentType?.trim().toLowerCase() === "openclaw" && input.platform === "telegram" && input.plan && input.target) {
-    handoff.agent_action = buildOpenClawTelegramAction(input.plan, input.target);
-  }
-  return {
-    handoff,
-    instruction: input.plan?.localSimulation ? `\u672C\u5730\u5B9E\u9A8C\uFF1A\u94C1\u8DEF\u4E0E\u5730\u56FE\u67E5\u8BE2\u771F\u5B9E\uFF0C\u6388\u6743\u3001\u901A\u77E5\u548C\u4EA4\u6613\u6A21\u62DF\uFF0C\u4E0D\u4F1A\u6263\u6B3E\u3002\u5728\u672C\u673A\u6253\u5F00 handoff.url \u6A21\u62DF\u4ED8\u6B3E\u5165\u53E3\uFF0C\u91D1\u989D ${input.amount}\uFF1B\u4EC5\u672C\u673A\u684C\u9762\u53EF\u8FBE\u3002${workBuddyAction ? "\u6309 handoff.agent_action \u539F\u6837\u6253\u5F00\u4E00\u6B21\u3002" : "\u5C55\u793A\u539F\u5165\u53E3\u3002"}\u7B49\u5F85\u7528\u6237\u64CD\u4F5C\u540E\u8BFB\u53D6\u540C\u4E00 Checkout\uFF1B\u4E0D\u521B\u5EFA\u66FF\u4EE3\u8BA2\u5355\uFF0C\u7528\u6237\u58F0\u660E\u4E0D\u8BC1\u660E\u6A21\u62DF\u4ED8\u6B3E\u5DF2\u786E\u8BA4\u3002` : `\u5148\u5C55\u793A\u5B98\u65B9\u5165\u53E3\uFF0C\u518D\u505A\u975E\u5FC5\u8981\u8BB0\u5FC6\u6216\u65E5\u5FD7\uFF1B\u4FDD\u7559\u5FC5\u9700\u5B89\u5168\u68C0\u67E5\u548C\u5BBF\u4E3B\u6743\u9650\u3002${checkoutHandoffInstruction(input.agentType, input.platform, input.amount, Boolean(mobileUrl))}`
-  };
-}
-__name(buildCheckoutHandoff, "buildCheckoutHandoff");
-function checkoutHandoffInstruction(agentType, platform2, amount, hasMobileLink) {
-  if (isWorkBuddyPlainChat(agentType, platform2)) {
-    const mobileSentence = hasMobileLink ? "\uFF0C\u7136\u540E\u628A handoff.mobile_url \u4F5C\u4E3A\u53EF\u70B9\u51FB\u94FE\u63A5\u53D1\u7ED9\u7528\u6237\uFF0C\u8BF4\u660E\u201C\u624B\u673A\u7AEF\u70B9\u5F00\u53EF\u76F4\u63A5\u8DF3\u8F6C\u652F\u4ED8\u5B9D\u6216\u5FAE\u4FE1\u652F\u4ED8\uFF1B\u5C0F\u7A0B\u5E8F\u5185\u6253\u4E0D\u5F00\u65F6\u590D\u5236\u5230\u624B\u673A\u6D4F\u89C8\u5668\u6253\u5F00\u5373\u53EF\u201D" : "";
-    const failLinks = hasMobileLink ? "\u53D1\u9001 handoff.url \u4E0E handoff.mobile_url" : "\u53D1\u9001\u539F\u59CB handoff.url";
-    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u82E5\u5F53\u524D\u53EF\u7528 present_files\uFF0C\u6309 handoff.agent_action \u539F\u6837\u6267\u884C\u4E00\u6B21\uFF1B\u4E0D\u53EF\u7528\u5219\u5F53\u8F6E\u76F4\u63A5\u5C55\u793A\u539F\u94FE\u63A5\uFF0C\u5728\u53F3\u4FA7\u6253\u5F00 handoff.url\uFF1B\u5DE5\u5177\u6210\u529F\u6216\u76F4\u63A5\u5C55\u793A\u94FE\u63A5\u540E\u8BF4\u660E\u91D1\u989D ${amount}${mobileSentence}\uFF0C\u7136\u540E\u505C\u6B62\u7B49\u5F85\u3002\u82E5\u5DE5\u5177\u5931\u8D25\uFF0C\u53EA${failLinks}\uFF0C\u62A5\u544A\u672A\u81EA\u52A8\u6253\u5F00\u5E76\u505C\u6B62\u3002\u4E0D\u8981\u7528 present_files \u6253\u5F00\u672C\u5730\u6587\u4EF6\u6216\u4E8C\u7EF4\u7801 PNG\uFF0C\u4E0D\u8981\u4E0B\u8F7D\u6216\u91CD\u5EFA\u4E8C\u7EF4\u7801\uFF0C\u4E0D\u8981\u8C03\u7528 pay\uFF0C\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\u3002\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
-  }
-  if (isZCodePlainChat(agentType, platform2)) {
-    const mobileSentence = hasMobileLink ? "\uFF0C\u5E76\u628A handoff.mobile_url \u53D1\u7ED9\u7528\u6237\u5907\u7528\uFF08\u624B\u673A\u7AEF\u70B9\u5F00\u53EF\u76F4\u63A5\u8DF3\u8F6C\u652F\u4ED8\u5B9D\u6216\u5FAE\u4FE1\u652F\u4ED8\uFF09" : "";
-    const fallbackLinks = hasMobileLink ? "\u540C\u4E00\u4E2A\u53EF\u70B9\u51FB handoff.url \u4E0E handoff.mobile_url" : "\u540C\u4E00\u4E2A\u53EF\u70B9\u51FB handoff.url";
-    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u7ACB\u5373\u7528 ZCode \u5185\u7F6E\u6D4F\u89C8\u5668\u6253\u5F00 handoff.url\uFF0C\u8BA9\u7528\u6237\u5B8C\u6210\u4ED8\u6B3E\uFF1B\u786E\u8BA4\u5DF2\u53D1\u8D77\u6253\u5F00\u540E\u8BF4\u660E\u91D1\u989D ${amount}${mobileSentence}\uFF0C\u7136\u540E\u505C\u6B62\u7B49\u5F85\u3002\u5DE5\u5177\u4E0D\u53EF\u7528\u65F6\u76F4\u63A5\u5C55\u793A\u94FE\u63A5\uFF0C\u4E0D\u8981\u4E0B\u8F7D\u3001\u89E3\u6790\u6216\u91CD\u5EFA\u4E8C\u7EF4\u7801\uFF0C\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\u3002\u53EA\u6709\u5185\u7F6E\u6D4F\u89C8\u5668\u660E\u786E\u4E0D\u53EF\u7528\u65F6\uFF0C\u624D\u5C55\u793A${fallbackLinks}\u3002\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
-  }
-  if (agentType?.trim().toLowerCase() === "doubao-work" && platform2 === "plain_chat") {
-    const directLink = hasMobileLink ? "handoff.mobile_url" : "handoff.url";
-    const directLabel = hasMobileLink ? "\u624B\u673A\u76F4\u63A5\u6253\u5F00\u6536\u94F6\u53F0\uFF08\u53EF\u8DF3\u8F6C\u652F\u4ED8\u5B9D/\u5FAE\u4FE1\uFF09" : "\u624B\u673A\u76F4\u63A5\u6253\u5F00\u6536\u94F6\u53F0";
-    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u5728\u5F53\u524D\u8C46\u5305\u5DE5\u4F5C\u5BF9\u8BDD\u4E2D\u5C55\u793A\u4E24\u4E2A\u6709\u6807\u7B7E\u7684\u5B98\u65B9\u5165\u53E3\uFF1A\u5C06 ${directLink} \u6807\u4E3A\u201C${directLabel}\u201D\uFF0C\u5C06 handoff.qr_image_url \u6807\u4E3A\u201C\u4E8C\u7EF4\u7801\u56FE\u7247\uFF08\u4FDD\u5B58\u6216\u7528\u53E6\u4E00\u53F0\u8BBE\u5907\u626B\u7801\uFF09\u201D\u3002\u8BF4\u660E\u91D1\u989D ${amount} \u540E\u505C\u6B62\u7B49\u5F85\u3002\u4E0D\u8981\u89E3\u6790\u6216\u5355\u72EC\u8F93\u51FA URL credential\uFF0C\u4E0D\u8981\u4E0B\u8F7D\u6216\u91CD\u5EFA\u4E8C\u7EF4\u7801\uFF0C\u4E0D\u8981\u8C03\u7528 pay\uFF0C\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\u3002\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
-  }
-  if (platform2 === "markdown") {
-    const mobileSentence = hasMobileLink ? "\uFF0C\u5E76\u9644 handoff.mobile_url \u4F9B\u624B\u673A\u7AEF\u70B9\u51FB\u76F4\u8FBE\u652F\u4ED8" : "";
-    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u628A handoff.markdown \u539F\u6837\u53D1\u9001\u5230\u5F53\u524D\u684C\u9762\u5BF9\u8BDD\uFF0C\u786E\u8BA4\u4E8C\u7EF4\u7801\u3001\u4ED8\u6B3E\u94FE\u63A5\u548C\u91D1\u989D ${amount} \u5747\u5DF2\u5B9E\u9645\u5BF9\u7528\u6237\u53EF\u89C1${mobileSentence}\uFF0C\u7136\u540E\u505C\u6B62\u7B49\u5F85\u3002\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\uFF1B\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
-  }
-  if (platform2 === "terminal") {
-    const mobileSentence = hasMobileLink ? "\uFF0C\u5E76\u5C55\u793A handoff.mobile_url \u4F9B\u624B\u673A\u7AEF\u70B9\u51FB\u76F4\u8FBE\u652F\u4ED8" : "";
-    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u5728\u7528\u6237\u53EF\u89C1\u7EC8\u7AEF\u5C55\u793A\u5F53\u524D Checkout \u7684\u4E8C\u7EF4\u7801\u3001handoff.url \u548C\u91D1\u989D ${amount}${mobileSentence}\uFF0C\u7136\u540E\u505C\u6B62\u7B49\u5F85\u3002\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\uFF1B\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
-  }
-  if (agentType?.trim().toLowerCase() === "openclaw" && platform2 === "telegram") {
-    const failLinks = hasMobileLink ? "handoff.qr_image_url\u3001\u91D1\u989D\u3001handoff.url \u4E0E handoff.mobile_url" : "handoff.qr_image_url\u3001\u91D1\u989D\u548C handoff.url";
-    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u6216\u6388\u6743\u72B6\u6001\u3002\u82E5\u5F53\u524D\u5DF2\u6709\u53EF\u7528 OpenClaw \u539F\u751F message tool\uFF0C\u4E25\u683C\u6309 handoff.agent_action.tool \u548C handoff.agent_action.arguments \u539F\u6837\u6267\u884C\uFF1B\u5B83\u4F1A\u53D1\u9001\u91D1\u989D ${amount}\u3001\u4E8C\u7EF4\u7801\u3001\u{1F4F1} \u624B\u673A\u70B9\u8FD9\u513F\u652F\u4ED8\u548C \u{1F4CB} \u5DF2\u6388\u6743\u7ED9\u6211\u8BFB\u3002\u4E0D\u5F97\u6539\u5199 presentation\u3001\u6362\u7528\u5176\u4ED6\u6D88\u606F\u5DE5\u5177\u3001\u62C6\u5F00\u6309\u94AE\u53D1\u9001\u6216\u7528\u666E\u901A\u56DE\u590D\u58F0\u79F0\u6309\u94AE\u5DF2\u7ECF\u53D1\u9001\u3002\u5DE5\u5177\u4E0D\u53EF\u7528\u65F6\u5F53\u8F6E\u76F4\u63A5\u5C55\u793A\u5DF2\u6709\u5B98\u65B9\u94FE\u63A5\uFF0C\u4E0D\u7814\u7A76\u6216\u5B89\u88C5\u5DE5\u5177\uFF1B\u5DE5\u5177\u6210\u529F\u6216\u5C55\u793A\u94FE\u63A5\u540E\u505C\u6B62\u7B49\u5F85\u3002\u6536\u5230 callback_data "itp:grant_confirmed:<checkout_id>" \u65F6\uFF0C\u8868\u793A\u7528\u6237\u58F0\u660E\u5DF2\u5728\u6536\u94F6\u53F0\u6388\u6743\u8BFB\u53D6\uFF1B\u7ACB\u5373\u6267\u884C next.command \u67E5\u8BE2\u540C\u4E00 Checkout\uFF0C\u518D\u53EA\u6267\u884C Backend \u8FD4\u56DE\u7684 next.command \u8FDB\u5165\u540C\u4E00 Execution \u7684 grant \u6D41\u7A0B\u3002\u8BE5 callback \u4E0D\u8BC1\u660E\u4ED8\u6B3E\u6210\u529F\u6216 grant \u5DF2\u751F\u6548\uFF1BBackend \u672A\u8FD4\u56DE grant_active \u524D\u4E0D\u5F97\u8BFB\u53D6\u6216\u731C\u6D4B\u7ED3\u679C\u3002\u82E5\u539F\u751F message tool \u660E\u786E\u5931\u8D25\u6216\u5F53\u524D Telegram \u672A\u542F\u7528 inline buttons\uFF0C\u53EA\u53D1\u9001\u73B0\u6709 ${failLinks}\uFF0C\u62A5\u544A\u6309\u94AE\u4E0D\u53EF\u7528\u5E76\u505C\u6B62\uFF1B\u4E0D\u8981\u521B\u5EFA\u65B0\u7684 Checkout\u3001Payment Intent \u6216 Execution\u3002`;
-  }
-  const urlList = hasMobileLink ? "handoff.url\u3001handoff.mobile_url\uFF08\u624B\u673A\u7AEF\u70B9\u51FB\u76F4\u8FBE\u652F\u4ED8\uFF09\u548C\u53EF\u7528\u7684 handoff.qr_image_url" : "handoff.url \u548C\u53EF\u7528\u7684 handoff.qr_image_url";
-  return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u628A ${urlList} \u5B9E\u9645\u53D1\u9001\u5230\u5F53\u524D\u4F1A\u8BDD\uFF0C\u8BF4\u660E\u91D1\u989D ${amount}\uFF0C\u7136\u540E\u505C\u6B62\u7B49\u5F85\u3002\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\uFF1B\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
-}
-__name(checkoutHandoffInstruction, "checkoutHandoffInstruction");
-
-// src/commands/checkout_handoff.ts
-var payableStates = ["draft", "quote_bound", "auth_required", "payment_required"];
-function assertCheckoutCreation(checkout, cartID, sourceExecutionID) {
-  const current = checkout.checkout;
-  if (!current.checkout_id || current.cart_id !== cartID || !payableStates.includes(current.status) || !checkout.display_token) {
-    throw checkoutNotPayable(current, cartID, sourceExecutionID, false);
-  }
-}
-__name(assertCheckoutCreation, "assertCheckoutCreation");
-function assertCheckoutPayable(checkout, authoritative, cartID, sourceExecutionID) {
-  const current = authoritative?.checkout ?? checkout.checkout;
-  const deadlineClosed = authoritative?.payment_remaining_seconds === 0 || current.expires_at !== void 0 && (!authoritative?.server_now || Date.parse(current.expires_at) <= Date.parse(authoritative.server_now));
-  if (current.cart_id && current.cart_id !== cartID || !payableStates.includes(current.status) || authoritative?.payment_intents.some((intent) => !["failed", "cancelled", "expired"].includes(intent.status)) || deadlineClosed || !checkout.display_token) {
-    throw checkoutNotPayable(current, cartID, sourceExecutionID, deadlineClosed);
-  }
-}
-__name(assertCheckoutPayable, "assertCheckoutPayable");
-function checkoutNotPayable(current, cartID, sourceExecutionID, deadlineClosed) {
-  return new CommandContractError(
-    "checkout_not_payable",
-    "original checkout is not a current payable entry",
-    "\u539FCheckout\u4E0D\u53EF\u4F5C\u4E3A\u65B0\u4ED8\u6B3E\u5165\u53E3\uFF1B\u6838\u5BF9\u539F\u8BA2\u5355\u3002\u8FC7\u671F\u4E0D\u7EED\u671F\uFF0C\u4ED8\u6B3E\u5904\u7406\u4E2D\u6216\u672A\u77E5\u4E0D\u91CD\u653E\uFF0C\u4E0D\u6362\u8D2D\u7269\u8F66\u6216\u5E42\u7B49\u952E\u521B\u5EFA\u66FF\u4EE3\u8D2D\u4E70\u3002",
-    sourceExecutionID ? [{ command: `itpay services next ${sourceExecutionID} --json`, reason: "\u8BFB\u53D6\u6765\u6E90\u6267\u884C\u7684\u539F\u8BA2\u5355\u4E0E\u4ED8\u6B3E\u4E8B\u5B9E" }] : [],
-    void 0,
-    {
-      cart_id: cartID,
-      checkout_id: current.checkout_id,
-      checkout_status: current.status,
-      reason: deadlineClosed ? "payment_window_closed" : "checkout_not_payable"
-    }
-  );
-}
-__name(checkoutNotPayable, "checkoutNotPayable");
-
 // node_modules/zod/v3/external.js
 var external_exports = {};
 __export(external_exports, {
@@ -9883,10 +9684,10 @@ var util;
       return obj[e];
     });
   };
-  util2.objectKeys = typeof Object.keys === "function" ? (obj) => Object.keys(obj) : (object) => {
+  util2.objectKeys = typeof Object.keys === "function" ? (obj) => Object.keys(obj) : (object3) => {
     const keys = [];
-    for (const key in object) {
-      if (Object.prototype.hasOwnProperty.call(object, key)) {
+    for (const key in object3) {
+      if (Object.prototype.hasOwnProperty.call(object3, key)) {
         keys.push(key);
       }
     }
@@ -13921,31 +13722,369 @@ var coerce = {
 };
 var NEVER = INVALID;
 
-// src/services/rail/aftercare.ts
-var target = external_exports.object({ leg_index: external_exports.number().int().nonnegative(), passenger_index: external_exports.number().int().nonnegative() }).strict();
-var inputSchema = external_exports.object({ operation: external_exports.enum(["refund", "change"]), targets: external_exports.array(target).min(1).max(15), reason: external_exports.string().trim().min(1).max(1e3), scope_revision: external_exports.literal(1), user_confirmed_scope: external_exports.literal(true), change: external_exports.object({ travel_date: external_exports.string().optional(), departure_after: external_exports.string().optional(), arrival_before: external_exports.string().optional(), seat_type: external_exports.string().optional(), train_code: external_exports.string().optional(), constraints: external_exports.string().min(1).max(1e3) }).strict().optional() }).strict();
-var responseSchema = external_exports.object({ expected_revision: external_exports.number().int().positive(), proposal_revision: external_exports.number().int().positive().optional(), user_approved: external_exports.boolean().optional(), additional_information: external_exports.string().max(1e3).optional(), reason: external_exports.string().max(1e3).optional() }).strict();
-function railAftercareList(directory, orderID) {
-  return { status: "aftercare_directory", result: { ...directory }, instruction: directory.instruction + "\u6BB5/\u4E58\u5BA2\u7D22\u5F15\u4ECE0\u8D77\uFF0C\u6309\u8FD4\u56DE\u4E8B\u5B9E\u9009\u76EE\u6807\uFF1B\u660E\u786E\u2018\u7B2C\u4E8C\u6BB5\u2019\u7528leg_index:1\u3002\u6574\u7A0B\u6A21\u677F\u5217\u5168\u90E8\u53EF\u7528\u76EE\u6807\uFF0C\u6307\u5B9A\u8303\u56F4\u5219\u4EC5\u4FDD\u7559\u5BF9\u5E94\u76EE\u6807\uFF0C\u4E0D\u624B\u586B\u7968\u4EF7/\u4F9B\u5E94\u5546\u5355\u53F7\u3002\u8303\u56F4\u5DF2\u660E\u786E\u53EA\u8BF4\u660E\u540E\u63D0\u4EA4\uFF1B\u4E0D\u91CD\u65B0\u8BE2\u95EE\u6574\u7A0B\u9009\u62E9\u3002", next: null, recovery: [], interaction: { schema_version: "itpay.interaction.v1", stage: "input_required", input_templates: Object.fromEntries(Object.entries(directory.input_templates).map(([operation, input]) => [operation, fileInputTemplate(`itpay aftercare create --order ${orderID} --input-json <file> --json`, { ...input }, ["targets", "reason", "user_confirmed_scope"])])) } };
+// src/services/shared/agent_facts.generated.ts
+var truth = external_exports.union([external_exports.boolean(), external_exports.literal("unknown")]);
+var agentDisplaySchema = external_exports.object({
+  version: external_exports.literal("itpay.agent.v1"),
+  kind: external_exports.enum(["result", "selection", "confirmation", "handoff", "progress", "blocked", "error"]),
+  state: external_exports.string(),
+  summary: external_exports.string(),
+  actions: external_exports.array(external_exports.object({ purpose: external_exports.string(), tool: external_exports.string(), arguments: external_exports.record(external_exports.unknown()), requires_confirmation: external_exports.boolean() }).strict()),
+  acceptance: external_exports.enum(["accepted", "not_accepted", "unknown"]),
+  references: external_exports.record(external_exports.string()),
+  request_sent: external_exports.boolean().optional(),
+  effects: external_exports.object({ persistent_task_created: truth, order_created: truth, inventory_held: truth, price_held: truth, payment_requested: truth, charged: truth, fulfilled: truth }).strict(),
+  cost: external_exports.object({ classification: external_exports.enum(["public_free", "platform_subsidized", "included_entitlement", "user_paid", "unknown"]), settlement_state: external_exports.string(), actual_charge: external_exports.record(external_exports.unknown()).nullable(), wallet_debited: truth }).strict(),
+  coverage: external_exports.record(external_exports.unknown()),
+  freshness: external_exports.object({ observed_at: external_exports.string().nullable(), valid_until: external_exports.string().nullable(), from_cache: truth }).strict(),
+  links: external_exports.array(external_exports.object({ kind: external_exports.string(), purpose: external_exports.string(), url: external_exports.string(), access: external_exports.literal("account_session"), expires_at: external_exports.string().nullable() }).strict()),
+  recovery: external_exports.object({ kind: external_exports.enum(["read_original", "complete_account_step", "supply_missing_decision", "wait", "none"]), reason_code: external_exports.string().nullable() }).strict(),
+  result: external_exports.record(external_exports.unknown()),
+  untrusted_content: external_exports.literal(true)
+}).strict();
+function isRecord2(v) {
+  return v !== null && typeof v === "object" && !Array.isArray(v);
+}
+__name(isRecord2, "isRecord");
+var object = /* @__PURE__ */ __name((v) => isRecord2(v) ? v : {}, "object");
+var text = /* @__PURE__ */ __name((v) => typeof v === "string" && v.length ? v : void 0, "text");
+var fact = /* @__PURE__ */ __name((v) => typeof v === "boolean" ? v : "unknown", "fact");
+var privateKeys = /* @__PURE__ */ new Set(["display_token", "complete_exchange_token", "receipt_token", "start_token", "poll_token", "access_token", "refresh_token", "session_token", "private_key", "authorization", "api_key", "provider_secret"]);
+function secretURL(value) {
+  try {
+    const u = new URL(value);
+    return Boolean(u.username || u.password || [...u.searchParams.keys()].some((k) => privateKeys.has(k.toLowerCase()) || k.toLowerCase() === "token") || /(?:access_token|refresh_token|start_token|poll_token|display_token)=/i.test(u.hash));
+  } catch {
+    return false;
+  }
 }
-__name(railAftercareList, "railAftercareList");
-function railAftercareEnvelope(view) {
-  const c = view.case;
-  const instruction = c.status === "awaiting_confirmation" ? "\u5C55\u793A\u5F53\u524D\u5177\u4F53\u6539\u7B7E\u65B9\u6848\u3001\u65E7\u65B0\u5BF9\u5E94\u3001\u5DEE\u4EF7\u548C\u6761\u4EF6\uFF1B\u65E7\u8D2D\u4E70\u59D4\u6258\u4E0D\u662F\u65B0\u65B9\u6848/\u8D39\u7528\u6279\u51C6\u3002\u6CA1\u6709\u771F\u5B9E\u56DE\u7B54\u4FDD\u6301false\u5E76\u7B49\u5F85\uFF1B\u672C\u8F6E\u8D39\u7528\u7531\u4EBA\u5DE5\u534F\u8C03\uFF0C\u6CA1\u6709\u81EA\u52A8\u652F\u4ED8\u94FE\u63A5\u3002" : c.status === "needs_input" ? "\u5C55\u793A\u7BA1\u7406\u5458\u8981\u6C42\u8865\u5145\u7684\u5185\u5BB9\uFF0C\u53EA\u8865\u7F3A\u5931\u4E8B\u5B9E\uFF1B\u4FDD\u7559\u539F\u7533\u8BF7\u8303\u56F4\u3002" : c.status === "completed" ? "\u4EBA\u5DE5\u53D7\u7406\u5DF2\u5B8C\u6210\uFF1B\u5206\u522B\u8BF4\u660E\u4F9B\u5E94\u5546\u6838\u9A8C\u7ED3\u679C\u4E0E\u5E73\u53F0\u9000\u6B3E\u91D1\u989D/\u72B6\u6001\u3002\u672A\u9000\u6BB5\u4EC5\u62A5\u544A\u6743\u5A01\u5DF2\u77E5\u4E8B\u5B9E\uFF0C\u4E0D\u4FDD\u8BC1\u4ECD\u53EF\u4E58\uFF1B\u4E0D\u6062\u590D\u5E73\u53F0\u5185\u5BB9\u8BBF\u95EE\u9501\u3002" : c.status === "processing" ? "\u539F\u7533\u8BF7\u6B63\u5728\u4EBA\u5DE5\u529E\u7406\u6216\u8D22\u52A1\u5904\u7406\u4E2D\uFF1B\u6CA1\u6709\u6700\u7EC8\u4E8B\u5B9E\u4E0D\u8BF4\u9000\u7968\u3001\u6539\u7B7E\u6216\u5230\u8D26\u6210\u529F\uFF0C\u4E0D\u91CD\u8BD5\u672A\u77E5\u8D44\u91D1\u3001\u4E0D\u53D6\u6D88\u5DF2\u53D1\u751F\u64CD\u4F5C\u3002" : ["cancelled", "rejected"].includes(c.status) ? "\u8BF4\u660E\u539F\u7533\u8BF7\u5DF2\u53D6\u6D88\u6216\u88AB\u62D2\u7EDD\u53CA\u539F\u56E0\uFF1B\u6CA1\u6709\u64A4\u9500\u5DF2\u53D1\u751F\u4F9B\u5E94\u5546\u64CD\u4F5C\uFF0C\u4E5F\u4E0D\u81EA\u52A8\u521B\u5EFA\u66FF\u4EE3\u8D2D\u4E70\u3002" : "\u5DF2\u63D0\u4EA4\u4EBA\u5DE5\u53D7\u7406\uFF0C\u5C1A\u672A\u786E\u8BA4\u4F9B\u5E94\u5546\u9000\u7968/\u6539\u7B7E\u6216\u94B1\u6B3E\u5230\u8D26\u3002\u5148\u4EA4\u4ED8\u7533\u8BF7\u72B6\u6001\u5165\u53E3\uFF0C\u518D\u6309\u7528\u6237\u610F\u613F\u67E5\u8BE2\u539F\u7533\u8BF7\uFF0C\u4E0D\u5FAA\u73AF\u8F6E\u8BE2\u3002";
-  const cancellation = view.can_cancel ? { cancel_template: fileInputTemplate(`itpay aftercare cancel ${c.case_id} --input-json <file> --json`, { expected_revision: c.revision, reason: "" }, ["reason"]) } : {};
-  const needsReply = ["awaiting_confirmation", "needs_input"].includes(c.status);
-  return { status: c.status, result: { ...view }, instruction, next: needsReply || ["completed", "cancelled", "rejected"].includes(c.status) ? null : { command: `itpay aftercare get ${c.case_id} --json`, reason: "\u6309\u7528\u6237\u8981\u6C42\u8BFB\u53D6\u540C\u4E00\u4EBA\u5DE5\u7533\u8BF7" }, recovery: [], ...needsReply || view.can_cancel ? { interaction: { schema_version: "itpay.interaction.v1", stage: c.status === "awaiting_confirmation" ? "consent_required" : "input_required", ...cancellation, ...needsReply ? { input_template: fileInputTemplate(`itpay aftercare respond ${c.case_id} --input-json <file> --json`, { expected_revision: c.revision, ...c.status === "awaiting_confirmation" ? { proposal_revision: c.proposal_revision, user_approved: false } : { additional_information: "" } }, c.status === "awaiting_confirmation" ? ["user_approved"] : ["additional_information"]) } : {} } } : {} };
+__name(secretURL, "secretURL");
+function publicData(value) {
+  if (Array.isArray(value)) return value.map(publicData);
+  if (value !== null && typeof value === "object") return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, privateKeys.has(key.toLowerCase()) ? { availability: "protected_transport_only" } : publicData(item)]));
+  if (typeof value === "string") {
+    if (secretURL(value)) return { availability: "secure_reference_required" };
+    return value.replace(/https?:\/\/[^\s<>"']+/gi, (target2) => secretURL(target2) ? "[protected reference]" : target2);
+  }
+  return value;
 }
-__name(railAftercareEnvelope, "railAftercareEnvelope");
-async function railAftercareCreate(backend, config, orderID, raw) {
-  const parsed = inputSchema.safeParse(raw);
-  if (!parsed.success) throw new CommandContractError("rail_aftercare_input_invalid", "Aftercare input fields or genuine scope confirmation are missing", "Agent\u8BFB\u53D6\u5F53\u524D\u5B8C\u6574\u6A21\u677F\u4FEE\u6B63\u6280\u672F\u5B57\u6BB5\uFF1B\u53EA\u95EE\u7F3A\u5931\u7684\u771F\u5B9E\u8303\u56F4/\u6539\u7B7E\u610F\u5411\uFF0C\u4E0D\u8BA9\u7528\u6237\u586B\u6280\u672FJSON\u3002", [{ command: `itpay aftercare list --order ${orderID} --json`, reason: "\u8BFB\u53D6\u5F53\u524D\u884C\u7A0B\u3001\u76EE\u6807\u548C\u5B8C\u6574\u6A21\u677F" }]);
-  const value = parsed.data;
-  const change = value.change;
-  const input = { operation: value.operation, targets: value.targets, reason: value.reason, scope_revision: value.scope_revision, user_confirmed_scope: value.user_confirmed_scope, ...change ? { change: { constraints: change.constraints, ...change.travel_date !== void 0 ? { travel_date: change.travel_date } : {}, ...change.departure_after !== void 0 ? { departure_after: change.departure_after } : {}, ...change.arrival_before !== void 0 ? { arrival_before: change.arrival_before } : {}, ...change.seat_type !== void 0 ? { seat_type: change.seat_type } : {}, ...change.train_code !== void 0 ? { train_code: change.train_code } : {} } } : {} };
-  return railAftercareEnvelope(await backend.createRailAftercare(orderID, input, await operationID(config, `aftercare.create:${orderID}:${JSON.stringify(input)}`)));
+__name(publicData, "publicData");
+function accountEntryLink(value, allowedOrigins) {
+  const v = text(value);
+  if (!v) return;
+  try {
+    const u = new URL(v);
+    if (!allowedOrigins.includes(u.origin) || u.username || u.password || u.search || u.hash || !/^\/(?:checkout|orders)\/[^/]+$/.test(u.pathname)) return;
+    return u.href;
+  } catch {
+    return;
+  }
 }
-__name(railAftercareCreate, "railAftercareCreate");
+__name(accountEntryLink, "accountEntryLink");
+function presentAgent(value, options) {
+  const raw = object(value), service = object(raw.service);
+  const appliedRoot = object(service.result);
+  const applied = Object.keys(object(appliedRoot.original_result)).length ? object(appliedRoot.original_result) : appliedRoot;
+  const checkout = Object.keys(object(service.checkout)).length ? object(service.checkout) : object(raw.checkout), handoff = applied.checkout_id ? applied : object(service.handoff);
+  const purchase = object(raw.review), sourceEffects = object(raw.effects);
+  const purchaseProgress = raw.completed_stage !== void 0 || raw.poll_after_ms !== void 0 || raw.auto_wait_remaining_ms !== void 0 ? { status: raw.status ?? null, completed_stage: raw.completed_stage ?? null, poll_after_ms: raw.poll_after_ms ?? null, auto_wait_remaining_ms: raw.auto_wait_remaining_ms ?? null } : void 0;
+  const refs = { ...options.originalReferences };
+  const refKeys = ["run_id", "intent_id", "operation_id", "publication_id", "request_ref", "service_execution_id", "source_service_execution_id", "checkout_id", "order_id", "case_id", "result_ref"];
+  for (const source of [raw, service, applied, handoff, checkout, object(object(raw.result).case)]) for (const key of refKeys) {
+    const v = text(source[key]);
+    if (v) refs[key] = v;
+  }
+  const error = object(raw.error), summary = object(service.summary);
+  let state = text(checkout.status) ?? text(applied.state) ?? text(service.state) ?? text(raw.execution_state) ?? text(raw.status) ?? text(object(object(raw.result).case).status) ?? "unknown";
+  const acceptance = raw.accepted === false ? "not_accepted" : raw.accepted === true || text(raw.run_id) || text(raw.service_execution_id) ? "accepted" : text(raw.intent_id) && !text(raw.run_id) ? "not_accepted" : "unknown";
+  const paymentReceived = ["payment_succeeded", "completed", "refunded"].includes(text(checkout.status) ?? "");
+  const links = [];
+  const entry = object(raw.official_entry ?? object(raw.checkout).official_entry);
+  const candidates = [...Array.isArray(handoff.links) ? handoff.links : [], ...entry.url ? [entry] : []];
+  for (const candidate of candidates) {
+    const c = object(candidate);
+    if (c.access !== "account_session" && handoff.handoff_access !== "account_session") continue;
+    const url = accountEntryLink(c.url, options.allowedOrigins);
+    if (url && !links.some((l) => l.url === url)) links.push({ kind: text(c.kind) ?? "official_checkout", purpose: text(c.purpose) ?? "checkout", url, access: "account_session", expires_at: text(c.expires_at) ?? text(handoff.expires_at) ?? null });
+  }
+  if (["expired", "cancelled", "failed"].includes(state)) links.length = 0;
+  let kind = Object.keys(error).length ? "error" : ["queued", "running", "in_flight", "processing", "started"].includes(state) ? "progress" : Object.keys(purchase).length ? "confirmation" : links.length ? "handoff" : state === "blocked" ? "blocked" : "result";
+  if (state === "unknown" || state === "unavailable") kind = "error";
+  if (paymentReceived) state = checkout.status === "refunded" ? "refunded" : "payment_received";
+  const settlement = text(raw.settlement_state) ?? "unknown";
+  const costClass = object(raw.cost).classification;
+  const classification = costClass === "public_free" || costClass === "platform_subsidized" || costClass === "included_entitlement" || costClass === "user_paid" ? costClass : "unknown";
+  const code = text(error.code) ?? text(summary.error_code) ?? text(applied.reason_code);
+  const reason = code && /^[a-zA-Z0-9_.:-]{1,128}$/.test(code) ? code : null;
+  const result = object(publicData({ ...purchaseProgress ? { purchase_progress: purchaseProgress } : {}, ...Object.keys(purchase).length ? { purchase_review: purchase } : {}, ...Object.keys(error).length ? { error } : {}, ...service.summary !== void 0 ? { summary: service.summary } : {}, ...service.actions !== void 0 ? { available_choices: service.actions } : {}, ...service.result !== void 0 ? { service_result: service.result } : {}, ...raw.result !== void 0 ? { content: raw.result } : {}, ...Object.keys(checkout).length ? { checkout } : {}, ...raw.effects !== void 0 ? { preparation_effects: raw.effects } : {} }));
+  return agentDisplaySchema.parse({
+    version: "itpay.agent.v1",
+    kind,
+    state,
+    summary: state === "unknown" ? "\u539F\u4EFB\u52A1\u72B6\u6001\u5C1A\u672A\u786E\u8BA4" : kind === "progress" ? "\u539F\u4EFB\u52A1\u5904\u7406\u4E2D" : kind === "handoff" ? "\u8BF7\u767B\u5F55\u539F\u8D26\u53F7\u529E\u7406" : state === "payment_received" ? "\u4ED8\u6B3E\u5DF2\u786E\u8BA4\uFF0C\u5C65\u7EA6\u4EE5\u539F\u8BA2\u5355\u4E8B\u5B9E\u4E3A\u51C6" : "\u5F53\u524D\u4E8B\u5B9E\u89C1 result",
+    actions: [],
+    acceptance,
+    references: refs,
+    ...typeof raw.request_sent === "boolean" ? { request_sent: raw.request_sent } : {},
+    effects: { persistent_task_created: fact(sourceEffects.persistent_task_created), order_created: fact(sourceEffects.order_created), inventory_held: fact(sourceEffects.inventory_held), price_held: fact(sourceEffects.price_held), payment_requested: fact(sourceEffects.payment_requested), charged: paymentReceived ? true : fact(sourceEffects.charged), fulfilled: fact(sourceEffects.fulfilled) },
+    cost: { classification, settlement_state: settlement, actual_charge: raw.actual_charge === void 0 ? null : object(publicData(raw.actual_charge)), wallet_debited: ["captured", "partially_refunded", "refunded"].includes(settlement) ? true : ["free", "reserved", "released"].includes(settlement) ? false : "unknown" },
+    coverage: object(publicData(applied.coverage ?? summary.coverage ?? raw.coverage)),
+    freshness: { observed_at: text(applied.observed_at) ?? text(summary.observed_at) ?? text(raw.updated_at) ?? null, valid_until: text(applied.expires_at) ?? text(summary.expires_at) ?? null, from_cache: fact(applied.from_cache ?? summary.from_cache) },
+    links,
+    recovery: { kind: kind === "confirmation" ? "supply_missing_decision" : links.length ? "complete_account_step" : refs.run_id || refs.service_execution_id ? "read_original" : "none", reason_code: reason },
+    result,
+    untrusted_content: true
+  });
+}
+__name(presentAgent, "presentAgent");
+
+// src/render/telegram.ts
+function buttonsFor(plan) {
+  if (plan.kind === "payment_qr" && plan.paymentIntentID) {
+    return [
+      { label: "\u652F\u4ED8\u9047\u5230\u95EE\u9898 / \u5237\u65B0", kind: "callback", intent: "refresh_payment_qr", ref: plan.paymentIntentID },
+      { label: "\u6211\u5DF2\u4ED8\u6B3E\uFF0C\u67E5\u8BE2\u72B6\u6001", kind: "callback", intent: "check_payment_status", ref: plan.paymentIntentID }
+    ];
+  }
+  if (plan.kind === "auth_qr" && plan.checkoutID) {
+    return [
+      { label: "\u6253\u5F00\u6388\u6743\u9875\u9762", kind: "url", url: plan.url },
+      { label: "\u67E5\u8BE2\u6388\u6743\u72B6\u6001", kind: "callback", intent: "check_checkout_status", ref: plan.checkoutID }
+    ];
+  }
+  return [
+    { label: "\u{1F4F1} \u624B\u673A\u70B9\u8FD9\u513F\u652F\u4ED8", kind: "url", url: plan.url },
+    ...plan.checkoutID ? [{ label: "\u{1F4CB} \u5DF2\u6388\u6743\u7ED9\u6211\u8BFB", kind: "callback", intent: "grant_confirmed", ref: plan.checkoutID }] : []
+  ];
+}
+__name(buttonsFor, "buttonsFor");
+function nativeButton(button) {
+  if (button.kind === "url") {
+    return { label: button.label, url: button.url ?? "" };
+  }
+  const value = button.intent === "check_checkout_status" ? `itp:checkout:${button.ref ?? ""}` : `itp:${button.intent ?? "callback"}:${button.ref ?? ""}`;
+  return { label: button.label, value };
+}
+__name(nativeButton, "nativeButton");
+function renderTelegram(plan, options) {
+  const out = options.output ?? ((line) => process.stdout.write(line));
+  const agentAction = buildOpenClawTelegramAction(plan, options.target);
+  const presentation = agentAction.arguments.presentation;
+  const media = collectTelegramMedia(plan);
+  const text2 = agentAction.arguments.message;
+  const openclawMessage = {
+    command: [
+      "openclaw",
+      "message",
+      "send",
+      "--channel",
+      "telegram",
+      "--target",
+      options.target,
+      "--message",
+      text2,
+      ...media.length > 0 ? ["--media", media[0].url] : [],
+      "--presentation",
+      JSON.stringify(presentation)
+    ],
+    // Keep the same Checkout visible if native buttons are unavailable.
+    if_unavailable: "If `openclaw message send` is unavailable, send the same QR media and Checkout URL as ordinary Telegram content, report that inline buttons are unavailable, and stop. Do not create another Checkout."
+  };
+  out(JSON.stringify({ presentation, agent_action: agentAction, openclaw_message: openclawMessage }, null, 2) + "\n");
+}
+__name(renderTelegram, "renderTelegram");
+function buildOpenClawTelegramAction(plan, target2) {
+  const buttons = buttonsFor(plan).map(nativeButton);
+  const media = collectTelegramMedia(plan);
+  const message = plan.kind === "payment_qr" ? `ItPay payment QR \u2014 ${plan.summary}` : plan.kind === "auth_qr" ? `ItPay auth required \u2014 ${plan.summary}` : `ItPay checkout QR \u2014 ${plan.summary}`;
+  const presentation = {
+    blocks: [{ type: "buttons", buttons }]
+  };
+  const nativeTarget = target2.trim().replace(/^telegram:/i, "");
+  return {
+    tool: "message",
+    arguments: {
+      action: "send",
+      channel: "telegram",
+      target: nativeTarget,
+      message,
+      ...media[0]?.url ? { media: media[0].url } : {},
+      presentation
+    }
+  };
+}
+__name(buildOpenClawTelegramAction, "buildOpenClawTelegramAction");
+function collectTelegramMedia(plan) {
+  const media = (plan.platform.media ?? []).map((item) => ({
+    url: item.url,
+    mimeType: item.mimeType ?? "image/png"
+  }));
+  if (plan.kind === "payment_qr" || media.length === 0) {
+    media.unshift({
+      url: plan.preferredQRSources.find((src) => src.length > 0) ?? plan.url,
+      mimeType: "image/png"
+    });
+  }
+  return media;
+}
+__name(collectTelegramMedia, "collectTelegramMedia");
+
+// src/render/checkout_handoff.ts
+function shouldPrepareLocalCheckoutImage(platform2) {
+  return platform2 === "markdown";
+}
+__name(shouldPrepareLocalCheckoutImage, "shouldPrepareLocalCheckoutImage");
+function isWorkBuddyPlainChat(agentType, platform2) {
+  return agentType?.trim().toLowerCase() === "workbuddy" && platform2 === "plain_chat";
+}
+__name(isWorkBuddyPlainChat, "isWorkBuddyPlainChat");
+function isZCodePlainChat(agentType, platform2) {
+  return agentType?.trim().toLowerCase() === "zcode" && platform2 === "plain_chat";
+}
+__name(isZCodePlainChat, "isZCodePlainChat");
+function isLinkOnlyBrowserAgent(agentType, platform2) {
+  return isWorkBuddyPlainChat(agentType, platform2) || isZCodePlainChat(agentType, platform2);
+}
+__name(isLinkOnlyBrowserAgent, "isLinkOnlyBrowserAgent");
+function buildWorkBuddyPresentFilesAction(url) {
+  return {
+    tool: "present_files",
+    arguments: { files: [url] }
+  };
+}
+__name(buildWorkBuddyPresentFilesAction, "buildWorkBuddyPresentFilesAction");
+function hasCompleteCheckoutTokens(url) {
+  if (!url) {
+    return false;
+  }
+  try {
+    const parsed = new URL(url);
+    return Boolean(parsed.searchParams.get("display_token") && parsed.searchParams.get("complete_exchange_token"));
+  } catch {
+    return false;
+  }
+}
+__name(hasCompleteCheckoutTokens, "hasCompleteCheckoutTokens");
+function buildCheckoutHandoff(input) {
+  const url = input.plan?.localSimulation && input.mobileUrl && hasCompleteCheckoutTokens(input.mobileUrl) ? input.mobileUrl : input.url;
+  const handoff = { url, ...input.plan?.localSimulation ? { environment: "local_simulation", query: "live", transactions: "simulated" } : {} };
+  const mobileUrl = !input.plan?.localSimulation && hasCompleteCheckoutTokens(input.mobileUrl) ? input.mobileUrl : void 0;
+  if (mobileUrl) {
+    handoff.mobile_url = mobileUrl;
+  }
+  const workBuddyAction = isWorkBuddyPlainChat(input.agentType, input.platform);
+  if (workBuddyAction) {
+    handoff.agent_action = buildWorkBuddyPresentFilesAction(url);
+  }
+  if (input.platform === "markdown") {
+    if (input.localPath) handoff.qr_local_path = input.localPath;
+    if (input.markdown) handoff.markdown = input.markdown;
+  } else if (input.platform === "plain_chat" && input.qrImageURL && !isLinkOnlyBrowserAgent(input.agentType, input.platform)) {
+    handoff.qr_image_url = input.qrImageURL;
+  } else if (input.platform === "telegram" && input.qrImageURL) {
+    handoff.qr_image_url = input.qrImageURL;
+  }
+  if (input.agentType?.trim().toLowerCase() === "openclaw" && input.platform === "telegram" && input.plan && input.target) {
+    handoff.agent_action = buildOpenClawTelegramAction(input.plan, input.target);
+  }
+  return {
+    handoff,
+    instruction: input.plan?.localSimulation ? `\u672C\u5730\u5B9E\u9A8C\uFF1A\u94C1\u8DEF\u4E0E\u5730\u56FE\u67E5\u8BE2\u771F\u5B9E\uFF0C\u6388\u6743\u3001\u901A\u77E5\u548C\u4EA4\u6613\u6A21\u62DF\uFF0C\u4E0D\u4F1A\u6263\u6B3E\u3002\u5728\u672C\u673A\u6253\u5F00 handoff.url \u6A21\u62DF\u4ED8\u6B3E\u5165\u53E3\uFF0C\u91D1\u989D ${input.amount}\uFF1B\u4EC5\u672C\u673A\u684C\u9762\u53EF\u8FBE\u3002${workBuddyAction ? "\u6309 handoff.agent_action \u539F\u6837\u6253\u5F00\u4E00\u6B21\u3002" : "\u5C55\u793A\u539F\u5165\u53E3\u3002"}\u7B49\u5F85\u7528\u6237\u64CD\u4F5C\u540E\u8BFB\u53D6\u540C\u4E00 Checkout\uFF1B\u4E0D\u521B\u5EFA\u66FF\u4EE3\u8BA2\u5355\uFF0C\u7528\u6237\u58F0\u660E\u4E0D\u8BC1\u660E\u6A21\u62DF\u4ED8\u6B3E\u5DF2\u786E\u8BA4\u3002` : `\u5148\u5C55\u793A\u5B98\u65B9\u5165\u53E3\uFF0C\u518D\u505A\u975E\u5FC5\u8981\u8BB0\u5FC6\u6216\u65E5\u5FD7\uFF1B\u4FDD\u7559\u5FC5\u9700\u5B89\u5168\u68C0\u67E5\u548C\u5BBF\u4E3B\u6743\u9650\u3002${checkoutHandoffInstruction(input.agentType, input.platform, input.amount, Boolean(mobileUrl))}`
+  };
+}
+__name(buildCheckoutHandoff, "buildCheckoutHandoff");
+function checkoutHandoffInstruction(agentType, platform2, amount, hasMobileLink) {
+  if (isWorkBuddyPlainChat(agentType, platform2)) {
+    const mobileSentence = hasMobileLink ? "\uFF0C\u7136\u540E\u628A handoff.mobile_url \u4F5C\u4E3A\u53EF\u70B9\u51FB\u94FE\u63A5\u53D1\u7ED9\u7528\u6237\uFF0C\u8BF4\u660E\u201C\u624B\u673A\u7AEF\u70B9\u5F00\u53EF\u76F4\u63A5\u8DF3\u8F6C\u652F\u4ED8\u5B9D\u6216\u5FAE\u4FE1\u652F\u4ED8\uFF1B\u5C0F\u7A0B\u5E8F\u5185\u6253\u4E0D\u5F00\u65F6\u590D\u5236\u5230\u624B\u673A\u6D4F\u89C8\u5668\u6253\u5F00\u5373\u53EF\u201D" : "";
+    const failLinks = hasMobileLink ? "\u53D1\u9001 handoff.url \u4E0E handoff.mobile_url" : "\u53D1\u9001\u539F\u59CB handoff.url";
+    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u82E5\u5F53\u524D\u53EF\u7528 present_files\uFF0C\u6309 handoff.agent_action \u539F\u6837\u6267\u884C\u4E00\u6B21\uFF1B\u4E0D\u53EF\u7528\u5219\u5F53\u8F6E\u76F4\u63A5\u5C55\u793A\u539F\u94FE\u63A5\uFF0C\u5728\u53F3\u4FA7\u6253\u5F00 handoff.url\uFF1B\u5DE5\u5177\u6210\u529F\u6216\u76F4\u63A5\u5C55\u793A\u94FE\u63A5\u540E\u8BF4\u660E\u91D1\u989D ${amount}${mobileSentence}\uFF0C\u7136\u540E\u505C\u6B62\u7B49\u5F85\u3002\u82E5\u5DE5\u5177\u5931\u8D25\uFF0C\u53EA${failLinks}\uFF0C\u62A5\u544A\u672A\u81EA\u52A8\u6253\u5F00\u5E76\u505C\u6B62\u3002\u4E0D\u8981\u7528 present_files \u6253\u5F00\u672C\u5730\u6587\u4EF6\u6216\u4E8C\u7EF4\u7801 PNG\uFF0C\u4E0D\u8981\u4E0B\u8F7D\u6216\u91CD\u5EFA\u4E8C\u7EF4\u7801\uFF0C\u4E0D\u8981\u8C03\u7528 pay\uFF0C\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\u3002\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
+  }
+  if (isZCodePlainChat(agentType, platform2)) {
+    const mobileSentence = hasMobileLink ? "\uFF0C\u5E76\u628A handoff.mobile_url \u53D1\u7ED9\u7528\u6237\u5907\u7528\uFF08\u624B\u673A\u7AEF\u70B9\u5F00\u53EF\u76F4\u63A5\u8DF3\u8F6C\u652F\u4ED8\u5B9D\u6216\u5FAE\u4FE1\u652F\u4ED8\uFF09" : "";
+    const fallbackLinks = hasMobileLink ? "\u540C\u4E00\u4E2A\u53EF\u70B9\u51FB handoff.url \u4E0E handoff.mobile_url" : "\u540C\u4E00\u4E2A\u53EF\u70B9\u51FB handoff.url";
+    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u7ACB\u5373\u7528 ZCode \u5185\u7F6E\u6D4F\u89C8\u5668\u6253\u5F00 handoff.url\uFF0C\u8BA9\u7528\u6237\u5B8C\u6210\u4ED8\u6B3E\uFF1B\u786E\u8BA4\u5DF2\u53D1\u8D77\u6253\u5F00\u540E\u8BF4\u660E\u91D1\u989D ${amount}${mobileSentence}\uFF0C\u7136\u540E\u505C\u6B62\u7B49\u5F85\u3002\u5DE5\u5177\u4E0D\u53EF\u7528\u65F6\u76F4\u63A5\u5C55\u793A\u94FE\u63A5\uFF0C\u4E0D\u8981\u4E0B\u8F7D\u3001\u89E3\u6790\u6216\u91CD\u5EFA\u4E8C\u7EF4\u7801\uFF0C\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\u3002\u53EA\u6709\u5185\u7F6E\u6D4F\u89C8\u5668\u660E\u786E\u4E0D\u53EF\u7528\u65F6\uFF0C\u624D\u5C55\u793A${fallbackLinks}\u3002\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
+  }
+  if (agentType?.trim().toLowerCase() === "doubao-work" && platform2 === "plain_chat") {
+    const directLink = hasMobileLink ? "handoff.mobile_url" : "handoff.url";
+    const directLabel = hasMobileLink ? "\u624B\u673A\u76F4\u63A5\u6253\u5F00\u6536\u94F6\u53F0\uFF08\u53EF\u8DF3\u8F6C\u652F\u4ED8\u5B9D/\u5FAE\u4FE1\uFF09" : "\u624B\u673A\u76F4\u63A5\u6253\u5F00\u6536\u94F6\u53F0";
+    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u5728\u5F53\u524D\u8C46\u5305\u5DE5\u4F5C\u5BF9\u8BDD\u4E2D\u5C55\u793A\u4E24\u4E2A\u6709\u6807\u7B7E\u7684\u5B98\u65B9\u5165\u53E3\uFF1A\u5C06 ${directLink} \u6807\u4E3A\u201C${directLabel}\u201D\uFF0C\u5C06 handoff.qr_image_url \u6807\u4E3A\u201C\u4E8C\u7EF4\u7801\u56FE\u7247\uFF08\u4FDD\u5B58\u6216\u7528\u53E6\u4E00\u53F0\u8BBE\u5907\u626B\u7801\uFF09\u201D\u3002\u8BF4\u660E\u91D1\u989D ${amount} \u540E\u505C\u6B62\u7B49\u5F85\u3002\u4E0D\u8981\u89E3\u6790\u6216\u5355\u72EC\u8F93\u51FA URL credential\uFF0C\u4E0D\u8981\u4E0B\u8F7D\u6216\u91CD\u5EFA\u4E8C\u7EF4\u7801\uFF0C\u4E0D\u8981\u8C03\u7528 pay\uFF0C\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\u3002\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
+  }
+  if (platform2 === "markdown") {
+    const mobileSentence = hasMobileLink ? "\uFF0C\u5E76\u9644 handoff.mobile_url \u4F9B\u624B\u673A\u7AEF\u70B9\u51FB\u76F4\u8FBE\u652F\u4ED8" : "";
+    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u628A handoff.markdown \u539F\u6837\u53D1\u9001\u5230\u5F53\u524D\u684C\u9762\u5BF9\u8BDD\uFF0C\u786E\u8BA4\u4E8C\u7EF4\u7801\u3001\u4ED8\u6B3E\u94FE\u63A5\u548C\u91D1\u989D ${amount} \u5747\u5DF2\u5B9E\u9645\u5BF9\u7528\u6237\u53EF\u89C1${mobileSentence}\uFF0C\u7136\u540E\u505C\u6B62\u7B49\u5F85\u3002\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\uFF1B\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
+  }
+  if (platform2 === "terminal") {
+    const mobileSentence = hasMobileLink ? "\uFF0C\u5E76\u5C55\u793A handoff.mobile_url \u4F9B\u624B\u673A\u7AEF\u70B9\u51FB\u76F4\u8FBE\u652F\u4ED8" : "";
+    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u5728\u7528\u6237\u53EF\u89C1\u7EC8\u7AEF\u5C55\u793A\u5F53\u524D Checkout \u7684\u4E8C\u7EF4\u7801\u3001handoff.url \u548C\u91D1\u989D ${amount}${mobileSentence}\uFF0C\u7136\u540E\u505C\u6B62\u7B49\u5F85\u3002\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\uFF1B\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
+  }
+  if (agentType?.trim().toLowerCase() === "openclaw" && platform2 === "telegram") {
+    const failLinks = hasMobileLink ? "handoff.qr_image_url\u3001\u91D1\u989D\u3001handoff.url \u4E0E handoff.mobile_url" : "handoff.qr_image_url\u3001\u91D1\u989D\u548C handoff.url";
+    return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u6216\u6388\u6743\u72B6\u6001\u3002\u82E5\u5F53\u524D\u5DF2\u6709\u53EF\u7528 OpenClaw \u539F\u751F message tool\uFF0C\u4E25\u683C\u6309 handoff.agent_action.tool \u548C handoff.agent_action.arguments \u539F\u6837\u6267\u884C\uFF1B\u5B83\u4F1A\u53D1\u9001\u91D1\u989D ${amount}\u3001\u4E8C\u7EF4\u7801\u3001\u{1F4F1} \u624B\u673A\u70B9\u8FD9\u513F\u652F\u4ED8\u548C \u{1F4CB} \u5DF2\u6388\u6743\u7ED9\u6211\u8BFB\u3002\u4E0D\u5F97\u6539\u5199 presentation\u3001\u6362\u7528\u5176\u4ED6\u6D88\u606F\u5DE5\u5177\u3001\u62C6\u5F00\u6309\u94AE\u53D1\u9001\u6216\u7528\u666E\u901A\u56DE\u590D\u58F0\u79F0\u6309\u94AE\u5DF2\u7ECF\u53D1\u9001\u3002\u5DE5\u5177\u4E0D\u53EF\u7528\u65F6\u5F53\u8F6E\u76F4\u63A5\u5C55\u793A\u5DF2\u6709\u5B98\u65B9\u94FE\u63A5\uFF0C\u4E0D\u7814\u7A76\u6216\u5B89\u88C5\u5DE5\u5177\uFF1B\u5DE5\u5177\u6210\u529F\u6216\u5C55\u793A\u94FE\u63A5\u540E\u505C\u6B62\u7B49\u5F85\u3002\u6536\u5230 callback_data "itp:grant_confirmed:<checkout_id>" \u65F6\uFF0C\u8868\u793A\u7528\u6237\u58F0\u660E\u5DF2\u5728\u6536\u94F6\u53F0\u6388\u6743\u8BFB\u53D6\uFF1B\u7ACB\u5373\u6267\u884C next.command \u67E5\u8BE2\u540C\u4E00 Checkout\uFF0C\u518D\u53EA\u6267\u884C Backend \u8FD4\u56DE\u7684 next.command \u8FDB\u5165\u540C\u4E00 Execution \u7684 grant \u6D41\u7A0B\u3002\u8BE5 callback \u4E0D\u8BC1\u660E\u4ED8\u6B3E\u6210\u529F\u6216 grant \u5DF2\u751F\u6548\uFF1BBackend \u672A\u8FD4\u56DE grant_active \u524D\u4E0D\u5F97\u8BFB\u53D6\u6216\u731C\u6D4B\u7ED3\u679C\u3002\u82E5\u539F\u751F message tool \u660E\u786E\u5931\u8D25\u6216\u5F53\u524D Telegram \u672A\u542F\u7528 inline buttons\uFF0C\u53EA\u53D1\u9001\u73B0\u6709 ${failLinks}\uFF0C\u62A5\u544A\u6309\u94AE\u4E0D\u53EF\u7528\u5E76\u505C\u6B62\uFF1B\u4E0D\u8981\u521B\u5EFA\u65B0\u7684 Checkout\u3001Payment Intent \u6216 Execution\u3002`;
+  }
+  const urlList = hasMobileLink ? "handoff.url\u3001handoff.mobile_url\uFF08\u624B\u673A\u7AEF\u70B9\u51FB\u76F4\u8FBE\u652F\u4ED8\uFF09\u548C\u53EF\u7528\u7684 handoff.qr_image_url" : "handoff.url \u548C\u53EF\u7528\u7684 handoff.qr_image_url";
+  return `Backend \u5C1A\u672A\u786E\u8BA4\u4ED8\u6B3E\u3002\u628A ${urlList} \u5B9E\u9645\u53D1\u9001\u5230\u5F53\u524D\u4F1A\u8BDD\uFF0C\u8BF4\u660E\u91D1\u989D ${amount}\uFF0C\u7136\u540E\u505C\u6B62\u7B49\u5F85\u3002\u4E0D\u8981\u521B\u5EFA\u65B0 Checkout\u3001Payment Intent \u6216 Execution\uFF1B\u53EA\u6709\u7528\u6237\u660E\u786E\u8868\u793A\u5DF2\u4ED8\u6B3E\u6216\u8981\u6C42\u67E5\u8BE2\u72B6\u6001\u65F6\uFF0C\u624D\u6267\u884C next.command\uFF1B\u7528\u6237\u7684\u8BDD\u4E0D\u662F\u4ED8\u6B3E\u6210\u529F\u8BC1\u660E\u3002`;
+}
+__name(checkoutHandoffInstruction, "checkoutHandoffInstruction");
+
+// src/commands/checkout_handoff.ts
+var payableStates = ["draft", "quote_bound", "auth_required", "payment_required"];
+function assertCheckoutCreation(checkout, cartID, sourceExecutionID) {
+  const current = checkout.checkout;
+  if (!current.checkout_id || current.cart_id !== cartID || !payableStates.includes(current.status) || !checkout.display_token) {
+    throw checkoutNotPayable(current, cartID, sourceExecutionID, false);
+  }
+}
+__name(assertCheckoutCreation, "assertCheckoutCreation");
+function assertCheckoutPayable(checkout, authoritative, cartID, sourceExecutionID) {
+  const current = authoritative?.checkout ?? checkout.checkout;
+  const deadlineClosed = authoritative?.payment_remaining_seconds === 0 || current.expires_at !== void 0 && (!authoritative?.server_now || Date.parse(current.expires_at) <= Date.parse(authoritative.server_now));
+  if (current.cart_id && current.cart_id !== cartID || !payableStates.includes(current.status) || authoritative?.payment_intents.some((intent) => !["failed", "cancelled", "expired"].includes(intent.status)) || deadlineClosed || !checkout.display_token) {
+    throw checkoutNotPayable(current, cartID, sourceExecutionID, deadlineClosed);
+  }
+}
+__name(assertCheckoutPayable, "assertCheckoutPayable");
+function checkoutNotPayable(current, cartID, sourceExecutionID, deadlineClosed) {
+  return new CommandContractError(
+    "checkout_not_payable",
+    "original checkout is not a current payable entry",
+    "\u539FCheckout\u4E0D\u53EF\u4F5C\u4E3A\u65B0\u4ED8\u6B3E\u5165\u53E3\uFF1B\u6838\u5BF9\u539F\u8BA2\u5355\u3002\u8FC7\u671F\u4E0D\u7EED\u671F\uFF0C\u4ED8\u6B3E\u5904\u7406\u4E2D\u6216\u672A\u77E5\u4E0D\u91CD\u653E\uFF0C\u4E0D\u6362\u8D2D\u7269\u8F66\u6216\u5E42\u7B49\u952E\u521B\u5EFA\u66FF\u4EE3\u8D2D\u4E70\u3002",
+    sourceExecutionID ? [{ command: `itpay services next ${sourceExecutionID} --json`, reason: "\u8BFB\u53D6\u6765\u6E90\u6267\u884C\u7684\u539F\u8BA2\u5355\u4E0E\u4ED8\u6B3E\u4E8B\u5B9E" }] : [],
+    void 0,
+    {
+      cart_id: cartID,
+      checkout_id: current.checkout_id,
+      checkout_status: current.status,
+      reason: deadlineClosed ? "payment_window_closed" : "checkout_not_payable"
+    }
+  );
+}
+__name(checkoutNotPayable, "checkoutNotPayable");
+
+// src/services/rail/aftercare.ts
+var target = external_exports.object({ leg_index: external_exports.number().int().nonnegative(), passenger_index: external_exports.number().int().nonnegative() }).strict();
+var inputSchema = external_exports.object({ operation: external_exports.enum(["refund", "change"]), targets: external_exports.array(target).min(1).max(15), reason: external_exports.string().trim().min(1).max(1e3), scope_revision: external_exports.literal(1), user_confirmed_scope: external_exports.literal(true), change: external_exports.object({ travel_date: external_exports.string().optional(), departure_after: external_exports.string().optional(), arrival_before: external_exports.string().optional(), seat_type: external_exports.string().optional(), train_code: external_exports.string().optional(), constraints: external_exports.string().min(1).max(1e3) }).strict().optional() }).strict();
+var responseSchema = external_exports.object({ expected_revision: external_exports.number().int().positive(), proposal_revision: external_exports.number().int().positive().optional(), user_approved: external_exports.boolean().optional(), additional_information: external_exports.string().max(1e3).optional(), reason: external_exports.string().max(1e3).optional() }).strict();
+function railAftercareList(directory, orderID) {
+  return { status: "aftercare_directory", result: { ...directory }, instruction: directory.instruction + "\u6BB5/\u4E58\u5BA2\u7D22\u5F15\u4ECE0\u8D77\uFF0C\u6309\u8FD4\u56DE\u4E8B\u5B9E\u9009\u76EE\u6807\uFF1B\u660E\u786E\u2018\u7B2C\u4E8C\u6BB5\u2019\u7528leg_index:1\u3002\u6574\u7A0B\u6A21\u677F\u5217\u5168\u90E8\u53EF\u7528\u76EE\u6807\uFF0C\u6307\u5B9A\u8303\u56F4\u5219\u4EC5\u4FDD\u7559\u5BF9\u5E94\u76EE\u6807\uFF0C\u4E0D\u624B\u586B\u7968\u4EF7/\u4F9B\u5E94\u5546\u5355\u53F7\u3002\u8303\u56F4\u5DF2\u660E\u786E\u53EA\u8BF4\u660E\u540E\u63D0\u4EA4\uFF1B\u4E0D\u91CD\u65B0\u8BE2\u95EE\u6574\u7A0B\u9009\u62E9\u3002", next: null, recovery: [], interaction: { schema_version: "itpay.interaction.v1", stage: "input_required", input_templates: Object.fromEntries(Object.entries(directory.input_templates).map(([operation, input]) => [operation, fileInputTemplate(`itpay aftercare create --order ${orderID} --input-json <file> --json`, { ...input }, ["targets", "reason", "user_confirmed_scope"])])) } };
+}
+__name(railAftercareList, "railAftercareList");
+function railAftercareEnvelope(view) {
+  const c = view.case;
+  const instruction = c.status === "awaiting_confirmation" ? "\u5C55\u793A\u5F53\u524D\u5177\u4F53\u6539\u7B7E\u65B9\u6848\u3001\u65E7\u65B0\u5BF9\u5E94\u3001\u5DEE\u4EF7\u548C\u6761\u4EF6\uFF1B\u65E7\u8D2D\u4E70\u59D4\u6258\u4E0D\u662F\u65B0\u65B9\u6848/\u8D39\u7528\u6279\u51C6\u3002\u6CA1\u6709\u771F\u5B9E\u56DE\u7B54\u4FDD\u6301false\u5E76\u7B49\u5F85\uFF1B\u672C\u8F6E\u8D39\u7528\u7531\u4EBA\u5DE5\u534F\u8C03\uFF0C\u6CA1\u6709\u81EA\u52A8\u652F\u4ED8\u94FE\u63A5\u3002" : c.status === "needs_input" ? "\u5C55\u793A\u7BA1\u7406\u5458\u8981\u6C42\u8865\u5145\u7684\u5185\u5BB9\uFF0C\u53EA\u8865\u7F3A\u5931\u4E8B\u5B9E\uFF1B\u4FDD\u7559\u539F\u7533\u8BF7\u8303\u56F4\u3002" : c.status === "completed" ? "\u4EBA\u5DE5\u53D7\u7406\u5DF2\u5B8C\u6210\uFF1B\u5206\u522B\u8BF4\u660E\u4F9B\u5E94\u5546\u6838\u9A8C\u7ED3\u679C\u4E0E\u5E73\u53F0\u9000\u6B3E\u91D1\u989D/\u72B6\u6001\u3002\u672A\u9000\u6BB5\u4EC5\u62A5\u544A\u6743\u5A01\u5DF2\u77E5\u4E8B\u5B9E\uFF0C\u4E0D\u4FDD\u8BC1\u4ECD\u53EF\u4E58\uFF1B\u4E0D\u6062\u590D\u5E73\u53F0\u5185\u5BB9\u8BBF\u95EE\u9501\u3002" : c.status === "processing" ? "\u539F\u7533\u8BF7\u6B63\u5728\u4EBA\u5DE5\u529E\u7406\u6216\u8D22\u52A1\u5904\u7406\u4E2D\uFF1B\u6CA1\u6709\u6700\u7EC8\u4E8B\u5B9E\u4E0D\u8BF4\u9000\u7968\u3001\u6539\u7B7E\u6216\u5230\u8D26\u6210\u529F\uFF0C\u4E0D\u91CD\u8BD5\u672A\u77E5\u8D44\u91D1\u3001\u4E0D\u53D6\u6D88\u5DF2\u53D1\u751F\u64CD\u4F5C\u3002" : ["cancelled", "rejected"].includes(c.status) ? "\u8BF4\u660E\u539F\u7533\u8BF7\u5DF2\u53D6\u6D88\u6216\u88AB\u62D2\u7EDD\u53CA\u539F\u56E0\uFF1B\u6CA1\u6709\u64A4\u9500\u5DF2\u53D1\u751F\u4F9B\u5E94\u5546\u64CD\u4F5C\uFF0C\u4E5F\u4E0D\u81EA\u52A8\u521B\u5EFA\u66FF\u4EE3\u8D2D\u4E70\u3002" : "\u5DF2\u63D0\u4EA4\u4EBA\u5DE5\u53D7\u7406\uFF0C\u5C1A\u672A\u786E\u8BA4\u4F9B\u5E94\u5546\u9000\u7968/\u6539\u7B7E\u6216\u94B1\u6B3E\u5230\u8D26\u3002\u5148\u4EA4\u4ED8\u7533\u8BF7\u72B6\u6001\u5165\u53E3\uFF0C\u518D\u6309\u7528\u6237\u610F\u613F\u67E5\u8BE2\u539F\u7533\u8BF7\uFF0C\u4E0D\u5FAA\u73AF\u8F6E\u8BE2\u3002";
+  const cancellation = view.can_cancel ? { cancel_template: fileInputTemplate(`itpay aftercare cancel ${c.case_id} --input-json <file> --json`, { expected_revision: c.revision, reason: "" }, ["reason"]) } : {};
+  const needsReply = ["awaiting_confirmation", "needs_input"].includes(c.status);
+  return { status: c.status, result: { ...view }, instruction, next: needsReply || ["completed", "cancelled", "rejected"].includes(c.status) ? null : { command: `itpay aftercare get ${c.case_id} --json`, reason: "\u6309\u7528\u6237\u8981\u6C42\u8BFB\u53D6\u540C\u4E00\u4EBA\u5DE5\u7533\u8BF7" }, recovery: [], ...needsReply || view.can_cancel ? { interaction: { schema_version: "itpay.interaction.v1", stage: c.status === "awaiting_confirmation" ? "consent_required" : "input_required", ...cancellation, ...needsReply ? { input_template: fileInputTemplate(`itpay aftercare respond ${c.case_id} --input-json <file> --json`, { expected_revision: c.revision, ...c.status === "awaiting_confirmation" ? { proposal_revision: c.proposal_revision, user_approved: false } : { additional_information: "" } }, c.status === "awaiting_confirmation" ? ["user_approved"] : ["additional_information"]) } : {} } } : {} };
+}
+__name(railAftercareEnvelope, "railAftercareEnvelope");
+async function railAftercareCreate(backend, config, orderID, raw) {
+  const parsed = inputSchema.safeParse(raw);
+  if (!parsed.success) throw new CommandContractError("rail_aftercare_input_invalid", "Aftercare input fields or genuine scope confirmation are missing", "Agent\u8BFB\u53D6\u5F53\u524D\u5B8C\u6574\u6A21\u677F\u4FEE\u6B63\u6280\u672F\u5B57\u6BB5\uFF1B\u53EA\u95EE\u7F3A\u5931\u7684\u771F\u5B9E\u8303\u56F4/\u6539\u7B7E\u610F\u5411\uFF0C\u4E0D\u8BA9\u7528\u6237\u586B\u6280\u672FJSON\u3002", [{ command: `itpay aftercare list --order ${orderID} --json`, reason: "\u8BFB\u53D6\u5F53\u524D\u884C\u7A0B\u3001\u76EE\u6807\u548C\u5B8C\u6574\u6A21\u677F" }]);
+  const value = parsed.data;
+  const change = value.change;
+  const input = { operation: value.operation, targets: value.targets, reason: value.reason, scope_revision: value.scope_revision, user_confirmed_scope: value.user_confirmed_scope, ...change ? { change: { constraints: change.constraints, ...change.travel_date !== void 0 ? { travel_date: change.travel_date } : {}, ...change.departure_after !== void 0 ? { departure_after: change.departure_after } : {}, ...change.arrival_before !== void 0 ? { arrival_before: change.arrival_before } : {}, ...change.seat_type !== void 0 ? { seat_type: change.seat_type } : {}, ...change.train_code !== void 0 ? { train_code: change.train_code } : {} } } : {} };
+  return railAftercareEnvelope(await backend.createRailAftercare(orderID, input, await operationID(config, `aftercare.create:${orderID}:${JSON.stringify(input)}`)));
+}
+__name(railAftercareCreate, "railAftercareCreate");
 async function railAftercareRespond(backend, id, raw, cancel = false) {
   const parsed = responseSchema.safeParse(raw);
   if (!parsed.success) throw new CommandContractError("rail_aftercare_input_invalid", "Current revision or response fields are missing", "\u4F7F\u7528\u539F\u7533\u8BF7\u5F53\u524D\u8FD4\u56DE\u6A21\u677F\uFF1B\u5B9E\u8D28\u65B9\u6848\u53D8\u5316\u987B\u91CD\u65B0\u53D6\u5F97\u660E\u786E\u540C\u610F\u3002", [{ command: `itpay aftercare get ${id} --json`, reason: "\u8BFB\u53D6\u540C\u4E00\u7533\u8BF7\u5F53\u524D\u65B9\u6848\u548C\u7248\u672C" }]);
@@ -13962,23 +14101,30 @@ async function railAftercareOrder(backend, order, envelope) {
 __name(railAftercareOrder, "railAftercareOrder");
 
 // src/state/task_journal.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync5, renameSync as renameSync2, writeFileSync as writeFileSync4 } from "node:fs";
-import { dirname as dirname3 } from "node:path";
-var PAUSED_STAGES = /* @__PURE__ */ new Set([
-  "login_required",
-  "rate_limited",
-  "quota_paused",
-  "auth_pending",
-  "awaiting_input"
-]);
-var TERMINAL_STAGES = /* @__PURE__ */ new Set([
-  "completed",
-  "delivered",
-  "issued",
-  "failed",
-  "cancelled",
-  "refunded"
-]);
+import { randomUUID as randomUUID5, createHash as createHash6 } from "node:crypto";
+import { existsSync as existsSync3, linkSync as linkSync4, lstatSync as lstatSync4, mkdirSync as mkdirSync5, readFileSync as readFileSync5, readdirSync as readdirSync3, unlinkSync as unlinkSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join2 } from "node:path";
+var PAUSED_STAGES = /* @__PURE__ */ new Set(["login_required", "rate_limited", "quota_paused", "auth_pending", "awaiting_input"]);
+var TERMINAL_STAGES = /* @__PURE__ */ new Set(["completed", "delivered", "issued", "failed", "cancelled", "refunded"]);
+var object2 = /* @__PURE__ */ __name((v) => v !== null && typeof v === "object" && !Array.isArray(v), "object");
+var finite = /* @__PURE__ */ __name((v) => typeof v === "number" && Number.isFinite(v) && v >= 0, "finite");
+function validTask(v) {
+  return object2(v) && typeof v.service_execution_id === "string" && typeof v.stage === "string" && typeof v.updated_at === "string" && Number.isFinite(Date.parse(v.updated_at)) && (v.service_id === void 0 || typeof v.service_id === "string") && (v.resume_command === void 0 || typeof v.resume_command === "string") && (v.automatic_wait_ms === void 0 || finite(v.automatic_wait_ms));
+}
+__name(validTask, "validTask");
+function validChange(v) {
+  if (!object2(v) || v.schema_version !== "itpay.task_change.v1" || typeof v.event_id !== "string" || typeof v.id !== "string" || typeof v.updated_at !== "string" || !Number.isFinite(Date.parse(v.updated_at)) || typeof v.monotonic !== "string" || !/^\d{1,30}$/.test(v.monotonic)) return false;
+  if (v.kind === "clear") return true;
+  if (v.kind === "wait") return finite(v.milliseconds);
+  if (v.kind === "observe") return typeof v.stage === "string" && (v.resume_command === void 0 || typeof v.resume_command === "string");
+  return v.kind === "record" && object2(v.task) && validTask({ ...v.task, updated_at: v.updated_at }) && v.task.service_execution_id === v.id;
+}
+__name(validChange, "validChange");
+var taskHash = /* @__PURE__ */ __name((id) => createHash6("sha256").update(id).digest("hex"), "taskHash");
+function invalid3() {
+  throw Object.assign(new Error("ItPay task journal is invalid; original records are unchanged"), { code: "task_journal_invalid" });
+}
+__name(invalid3, "invalid");
 var TaskJournal = class {
   constructor(path3) {
     this.path = path3;
@@ -13988,83 +14134,103 @@ var TaskJournal = class {
     __name(this, "TaskJournal");
   }
   record(task) {
-    const file = this.readFile();
-    file.tasks[task.service_execution_id] = {
-      ...task,
-      ...file.tasks[task.service_execution_id]?.automatic_wait_ms !== void 0 && task.automatic_wait_ms === void 0 ? { automatic_wait_ms: file.tasks[task.service_execution_id].automatic_wait_ms } : {},
-      updated_at: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    this.writeFile(file);
-  }
-  clear(serviceExecutionID) {
-    const file = this.readFile();
-    if (!file.tasks[serviceExecutionID]) return;
-    delete file.tasks[serviceExecutionID];
-    this.writeFile(file);
-  }
-  // Observe the latest stage without deleting history; terminal stages stop
-  // the task from counting as resumable.
-  observe(serviceExecutionID, stage, resumeCommand) {
-    const file = this.readFile();
-    const existing = file.tasks[serviceExecutionID];
-    if (existing && existing.stage === stage && (resumeCommand === void 0 || existing.resume_command === resumeCommand)) return;
-    file.tasks[serviceExecutionID] = {
-      service_execution_id: serviceExecutionID,
-      ...existing?.service_id ? { service_id: existing.service_id } : {},
-      stage,
-      ...existing?.automatic_wait_ms !== void 0 ? { automatic_wait_ms: existing.automatic_wait_ms } : {},
-      ...resumeCommand ?? existing?.resume_command ? { resume_command: resumeCommand ?? existing.resume_command } : {},
-      updated_at: (/* @__PURE__ */ new Date()).toISOString()
-    };
-    this.writeFile(file);
+    this.readFile(task.service_execution_id);
+    this.append({ kind: "record", id: task.service_execution_id, task });
   }
-  remainingAutomaticWait(serviceExecutionID) {
-    if (existsSync3(this.path)) {
-      try {
-        const raw = JSON.parse(readFileSync5(this.path, "utf8"));
-        if (raw.schema_version !== "itpay.task_journal.v1" || !raw.tasks || typeof raw.tasks !== "object") return 0;
-      } catch {
-        return 0;
-      }
+  clear(id) {
+    if (this.readFile(id).tasks[id]) this.append({ kind: "clear", id });
+  }
+  observe(id, stage, resumeCommand) {
+    const existing = this.readFile(id).tasks[id];
+    if (existing && (TERMINAL_STAGES.has(existing.stage) || existing.stage === stage && (resumeCommand === void 0 || existing.resume_command === resumeCommand))) return;
+    this.append({ kind: "observe", id, stage, ...resumeCommand === void 0 ? {} : { resume_command: resumeCommand } });
+  }
+  remainingAutomaticWait(id) {
+    try {
+      return Math.max(0, 12e4 - (this.readFile(id).spent.get(id) ?? 0));
+    } catch {
+      return 0;
     }
-    const spent = this.readFile().tasks[serviceExecutionID]?.automatic_wait_ms ?? 0;
-    return typeof spent === "number" && Number.isFinite(spent) && spent >= 0 ? Math.max(0, 12e4 - spent) : 0;
   }
-  recordAutomaticWait(serviceExecutionID, milliseconds) {
-    if (this.remainingAutomaticWait(serviceExecutionID) === 0) return 0;
-    const file = this.readFile();
-    const existing = file.tasks[serviceExecutionID];
-    const spent = Math.min(12e4, (existing?.automatic_wait_ms ?? 0) + Math.max(0, milliseconds));
-    file.tasks[serviceExecutionID] = { ...existing ?? { service_execution_id: serviceExecutionID, stage: "running" }, automatic_wait_ms: spent, updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-    this.writeFile(file);
-    return 12e4 - spent;
+  recordAutomaticWait(id, milliseconds) {
+    if (!finite(milliseconds) || this.remainingAutomaticWait(id) === 0) return 0;
+    if (milliseconds > 0) this.append({ kind: "wait", id, milliseconds: Math.min(12e4, milliseconds) });
+    return this.remainingAutomaticWait(id);
   }
-  // Tasks paused behind login/quota gates, newest first. Terminal or
-  // completed tasks never count as "still waiting for login".
   pausedTasks() {
-    const file = this.readFile();
-    return Object.values(file.tasks).filter((task) => PAUSED_STAGES.has(task.stage) && !TERMINAL_STAGES.has(task.stage)).sort((left, right) => right.updated_at.localeCompare(left.updated_at));
+    return Object.values(this.readFile().tasks).filter((t) => PAUSED_STAGES.has(t.stage) && !TERMINAL_STAGES.has(t.stage)).sort((a, b) => b.updated_at.localeCompare(a.updated_at));
   }
-  readFile() {
-    if (!existsSync3(this.path)) return { schema_version: "itpay.task_journal.v1", tasks: {} };
+  readFile(onlyID) {
+    const tasks = /* @__PURE__ */ new Map(), spent = /* @__PURE__ */ new Map(), cleared = /* @__PURE__ */ new Set();
+    if (existsSync3(this.path)) {
+      let old;
+      try {
+        old = JSON.parse(readFileSync5(this.path, "utf8"));
+      } catch {
+        return invalid3();
+      }
+      if (!object2(old) || old.schema_version !== "itpay.task_journal.v1" || !object2(old.tasks)) return invalid3();
+      for (const [id, task] of Object.entries(old.tasks)) {
+        if (!validTask(task) || task.service_execution_id !== id) return invalid3();
+        if (onlyID === void 0 || onlyID === id) {
+          tasks.set(id, task);
+          spent.set(id, task.automatic_wait_ms ?? 0);
+        }
+      }
+    }
+    const directory = this.path + ".d";
+    const changes = [];
+    if (existsSync3(directory) && (!lstatSync4(directory).isDirectory() || lstatSync4(directory).isSymbolicLink())) return invalid3();
+    if (existsSync3(directory)) for (const name of readdirSync3(directory).filter((n) => n.endsWith(".json") && (onlyID === void 0 || n.startsWith(taskHash(onlyID) + "-") || !/^\w{64}-[\da-f-]+\.json$/.test(n)))) {
+      const path3 = join2(directory, name);
+      const stat = lstatSync4(path3);
+      if (!stat.isFile() || stat.isSymbolicLink()) return invalid3();
+      let raw;
+      try {
+        raw = JSON.parse(readFileSync5(path3, "utf8"));
+      } catch {
+        return invalid3();
+      }
+      if (!validChange(raw) || name !== taskHash(raw.id) + "-" + raw.event_id + ".json") return invalid3();
+      changes.push(raw);
+    }
+    changes.sort((a, b) => a.updated_at.localeCompare(b.updated_at) || (BigInt(a.monotonic) < BigInt(b.monotonic) ? -1 : BigInt(a.monotonic) > BigInt(b.monotonic) ? 1 : a.event_id.localeCompare(b.event_id)));
+    for (const change of changes) {
+      const id = change.id, existing = tasks.get(id);
+      if (change.kind === "wait") {
+        spent.set(id, Math.min(12e4, (spent.get(id) ?? 0) + change.milliseconds));
+        if (!cleared.has(id)) tasks.set(id, { ...existing ?? { service_execution_id: id, stage: "running" }, updated_at: change.updated_at, automatic_wait_ms: spent.get(id) ?? 0 });
+      } else if (change.kind === "clear") {
+        tasks.delete(id);
+        cleared.add(id);
+      } else if (change.kind === "record") {
+        cleared.delete(id);
+        spent.set(id, Math.max(spent.get(id) ?? 0, change.task.automatic_wait_ms ?? 0));
+        tasks.set(id, { ...change.task, updated_at: change.updated_at, automatic_wait_ms: spent.get(id) ?? 0 });
+      } else if (!cleared.has(id) && (!existing || !TERMINAL_STAGES.has(existing.stage))) {
+        tasks.set(id, { ...existing ?? { service_execution_id: id }, stage: change.stage, ...change.resume_command === void 0 ? {} : { resume_command: change.resume_command }, updated_at: change.updated_at, automatic_wait_ms: spent.get(id) ?? 0 });
+      }
+    }
+    return { tasks: Object.fromEntries([...tasks].sort((a, b) => b[1].updated_at.localeCompare(a[1].updated_at)).slice(0, 50)), spent };
+  }
+  append(change) {
+    const event = { ...change, schema_version: "itpay.task_change.v1", event_id: randomUUID5(), updated_at: (/* @__PURE__ */ new Date()).toISOString(), monotonic: process.hrtime.bigint().toString() };
+    if (!validChange(event)) return invalid3();
+    const directory = this.path + ".d";
+    mkdirSync5(directory, { recursive: true, mode: 448 });
+    if (!lstatSync4(directory).isDirectory() || lstatSync4(directory).isSymbolicLink()) return invalid3();
+    const temp = join2(directory, "." + event.event_id + ".tmp"), target2 = join2(directory, taskHash(event.id) + "-" + event.event_id + ".json");
     try {
-      const parsed = JSON.parse(readFileSync5(this.path, "utf8"));
-      if (parsed.schema_version !== "itpay.task_journal.v1" || !parsed.tasks || typeof parsed.tasks !== "object") {
-        return { schema_version: "itpay.task_journal.v1", tasks: {} };
+      writeFileSync4(temp, JSON.stringify(event), { flag: "wx", mode: 384 });
+      linkSync4(temp, target2);
+    } finally {
+      try {
+        unlinkSync4(temp);
+      } catch (e) {
+        if (!object2(e) || e.code !== "ENOENT") throw e;
       }
-      return parsed;
-    } catch {
-      return { schema_version: "itpay.task_journal.v1", tasks: {} };
     }
   }
-  writeFile(file) {
-    const entries = Object.entries(file.tasks).sort((left, right) => right[1].updated_at.localeCompare(left[1].updated_at));
-    file.tasks = Object.fromEntries(entries.slice(0, 50));
-    mkdirSync5(dirname3(this.path), { recursive: true, mode: 448 });
-    const tmp = `${this.path}.${process.pid}.tmp`;
-    writeFileSync4(tmp, JSON.stringify(file), { mode: 384 });
-    renameSync2(tmp, this.path);
-  }
 };
 
 // src/render/markdown.ts
@@ -14483,10 +14649,10 @@ function tokenizedCheckoutURL(checkoutURL, displayToken, qrPayload) {
 __name(tokenizedCheckoutURL, "tokenizedCheckoutURL");
 function publicPurchaseTemplate(value) {
   if (value === void 0) return void 0;
-  const invalid4 = /* @__PURE__ */ __name(() => new CommandContractError("public_operation_contract_invalid", "incomplete public purchase operation", "\u670D\u52A1\u8FD4\u56DE\u7684\u51C6\u5907\u8D2D\u4E70\u5408\u540C\u4E0D\u5B8C\u6574\uFF1B\u4FDD\u7559\u5F53\u524D\u5FEB\u7167\u4E0E\u5DF2\u6709\u8D2D\u4E70\u5E76\u505C\u6B62\uFF0C\u4E0D\u80FD\u9000\u56DE\u65E7\u5165\u53E3\u62FC\u63A5\u51ED\u636E\u3002", [], void 0, { reason: "purchase_contract_missing" }), "invalid");
-  if (typeof value !== "object" || value === null || Array.isArray(value) || !("service_id" in value) || typeof value.service_id !== "string" || !("operation_id" in value) || typeof value.operation_id !== "string" || !("input" in value) || typeof value.input !== "object" || value.input === null || Array.isArray(value.input) || !("continuation" in value)) throw invalid4();
+  const invalid5 = /* @__PURE__ */ __name(() => new CommandContractError("public_operation_contract_invalid", "incomplete public purchase operation", "\u670D\u52A1\u8FD4\u56DE\u7684\u51C6\u5907\u8D2D\u4E70\u5408\u540C\u4E0D\u5B8C\u6574\uFF1B\u4FDD\u7559\u5F53\u524D\u5FEB\u7167\u4E0E\u5DF2\u6709\u8D2D\u4E70\u5E76\u505C\u6B62\uFF0C\u4E0D\u80FD\u9000\u56DE\u65E7\u5165\u53E3\u62FC\u63A5\u51ED\u636E\u3002", [], void 0, { reason: "purchase_contract_missing" }), "invalid");
+  if (typeof value !== "object" || value === null || Array.isArray(value) || !("service_id" in value) || typeof value.service_id !== "string" || !("operation_id" in value) || typeof value.operation_id !== "string" || !("input" in value) || typeof value.input !== "object" || value.input === null || Array.isArray(value.input) || !("continuation" in value)) throw invalid5();
   const ref = value.continuation;
-  if (typeof ref !== "object" || ref === null || Array.isArray(ref) || !("service_execution_id" in ref) || typeof ref.service_execution_id !== "string" || !("snapshot_id" in ref) || typeof ref.snapshot_id !== "string") throw invalid4();
+  if (typeof ref !== "object" || ref === null || Array.isArray(ref) || !("service_execution_id" in ref) || typeof ref.service_execution_id !== "string" || !("snapshot_id" in ref) || typeof ref.snapshot_id !== "string") throw invalid5();
   const template = fileInputTemplate(`itpay services run ${shellArgument(value.service_id)} --operation ${shellArgument(value.operation_id)} --input-json <file> --json`, { input: value.input, continuation: { service_execution_id: ref.service_execution_id, snapshot_id: ref.snapshot_id } });
   return { ...template, input_example: template.file_content };
 }
@@ -14559,6 +14725,8 @@ var RAIL_SERVICE_GUIDANCE = {
       { name: "origin_location", description: "\u5DF2\u77E5\u5750\u6807\u5BF9\u8C61\uFF08\u9AD8\u5FB7 GCJ-02\uFF09" },
       { name: "destination_location", description: "\u76EE\u7684\u5730\u5750\u6807\u5BF9\u8C61" },
       { name: "depart_after", description: "\u4E0D\u65E9\u4E8E\u8BE5\u65F6\u95F4\u51FA\u53D1" },
+      { name: "depart_before", description: "\u4E0D\u665A\u4E8E\u8BE5\u65F6\u95F4\u51FA\u53D1\uFF1B\u4FDD\u7559\u7528\u6237\u660E\u786E\u4E0A\u9650" },
+      { name: "arrive_after", description: "\u4E0D\u65E9\u4E8E\u8BE5\u65F6\u95F4\u5230\u8FBE\uFF1B\u4E0E\u6700\u665A\u5230\u8FBE\u4E00\u8D77\u4F5C\u4E3A\u8D44\u683C\u6761\u4EF6\uFF0C\u4E0D\u53EA\u4F5C\u6392\u5E8F" },
       { name: "depart_before", description: "\u4E0D\u665A\u4E8E\u8BE5\u65F6\u95F4\u51FA\u53D1" },
       { name: "arrive_before", description: "\u4E0D\u665A\u4E8E\u8BE5\u65F6\u95F4\u5230\u8FBE" },
       { name: "user_query", description: "\u65C5\u884C\u9700\u6C42\u539F\u8BDD\uFF0C\u6700\u591A4096 UTF-8\u5B57\u8282\uFF1B\u65F6\u95F4\u7B49\u660E\u786E\u6761\u4EF6\u4ECD\u586B\u5199\u5BF9\u5E94\u7ED3\u6784\u5316\u5B57\u6BB5" },
@@ -15745,11 +15913,11 @@ function writeSavedPage(envelope, options, key, offset, continuation, updateMeta
   const render = /* @__PURE__ */ __name((output) => writeCommandEnvelope(envelope, { ...options, output }), "render");
   if (!options.all) {
     for (; ; ) {
-      let text = "";
+      let text2 = "";
       render((value) => {
-        text += value;
+        text2 += value;
       });
-      if (Buffer.byteLength(text, "utf8") <= bound) break;
+      if (Buffer.byteLength(text2, "utf8") <= bound) break;
       if (rows.length <= 1) {
         throw new CommandContractError(
           "saved_row_too_large",
@@ -16407,7 +16575,7 @@ function serviceAdapterKey(execution) {
   const binding = execution.public_binding;
   if (binding) {
     if (binding.adapter_key === "schema.v1") return "schema.v1";
-    if (binding.adapter_key === "rail.v1" && ["scv_itpay_rail_public_v1", "scv_itpay_rail_public_v1_capacity_20261015"].includes(binding.service_definition_version)) return "rail.v1";
+    if (binding.adapter_key === "rail.v1" && ["scv_itpay_rail_public_v1", "scv_itpay_rail_public_v1_capacity_20261015", "scv_itpay_rail_public_v5"].includes(binding.service_definition_version)) return "rail.v1";
     return "unsupported";
   }
   const versions = legacyRailContracts.get(execution.service_id);
@@ -16440,12 +16608,69 @@ function projectCheckoutPresentation(presentation, model) {
 }
 __name(projectCheckoutPresentation, "projectCheckoutPresentation");
 
+// src/render/browser.ts
+import { spawn } from "node:child_process";
+import { platform } from "node:os";
+function isPresentableURL(raw, baseURL, env = process.env) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return false;
+  }
+  if (url.username || url.password) return false;
+  if (env.ITPAY_CLI_DEV === "1" && /^http:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(url.origin)) return true;
+  if (url.protocol !== "https:") return false;
+  const allowedOrigins = new Set(OFFICIAL_BACKEND_URLS);
+  if (baseURL) {
+    try {
+      allowedOrigins.add(new URL(baseURL).origin);
+    } catch {
+    }
+  }
+  return allowedOrigins.has(url.origin);
+}
+__name(isPresentableURL, "isPresentableURL");
+function openInSystemBrowser(raw, baseURL, env = process.env) {
+  if (!isPresentableURL(raw, baseURL, env)) {
+    return Promise.resolve({ status: "failed", reason: "url_rejected" });
+  }
+  const [command, args] = openerArgv(raw);
+  if (!command) {
+    return Promise.resolve({ status: "unavailable", reason: "no system opener on this platform" });
+  }
+  return new Promise((resolvePromise) => {
+    const child = spawn(command, args, { detached: true, stdio: "ignore" });
+    child.once("error", (error) => resolvePromise({ status: "failed", reason: error.message }));
+    child.once("spawn", () => {
+      child.unref();
+      resolvePromise({ status: "dispatch_accepted", argv: [command, ...args] });
+    });
+  });
+}
+__name(openInSystemBrowser, "openInSystemBrowser");
+function openerArgv(url) {
+  switch (platform()) {
+    case "darwin":
+      return ["open", [url]];
+    case "win32":
+      return ["cmd.exe", ["/c", "start", "", url]];
+    case "linux":
+    case "freebsd":
+    case "openbsd":
+      return ["xdg-open", [url]];
+    default:
+      return [void 0, []];
+  }
+}
+__name(openerArgv, "openerArgv");
+
 // src/render/qr.ts
 var import_qrcode = __toESM(require_lib(), 1);
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 function terminalQRType(format) {
   return format === "utf8" ? "utf8" : "terminal";
 }
@@ -16460,7 +16685,7 @@ async function renderTerminalQR(url, format) {
 __name(renderTerminalQR, "renderTerminalQR");
 async function writeLocalPNG(url) {
   const dir = await fs.mkdtemp(path.join(process.env.ITPAY_STATE_DIR || os.tmpdir(), "itpay-v3-"));
-  const filePath = path.join(dir, `itpay-${randomUUID5()}.png`);
+  const filePath = path.join(dir, `itpay-${randomUUID6()}.png`);
   await import_qrcode.default.toFile(filePath, url, {
     type: "png",
     errorCorrectionLevel: "M",
@@ -16494,15 +16719,15 @@ function renderInlineTerminalImage(filePath, out) {
 __name(renderInlineTerminalImage, "renderInlineTerminalImage");
 
 // src/render/ide.ts
-import { mkdirSync as mkdirSync6, readFileSync as readFileSync7, renameSync as renameSync3, writeFileSync as writeFileSync5 } from "node:fs";
-import { join as join2 } from "node:path";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync7, renameSync as renameSync2, writeFileSync as writeFileSync5 } from "node:fs";
+import { join as join3 } from "node:path";
 import { tmpdir } from "node:os";
-import { createHash as createHash6, randomUUID as randomUUID6 } from "node:crypto";
+import { createHash as createHash7, randomUUID as randomUUID7 } from "node:crypto";
 var IDE_ATTACH_REASON = "\u7ACB\u5373\u5C55\u793A\u5DF2\u6838\u9A8C\u5B98\u65B9\u94FE\u63A5\u548C\u771F\u5B9E\u671F\u9650\uFF1B\u56FE\u7247\u53EA\u662F\u589E\u5F3A\u5448\u73B0\u3002\u5DF2\u6709\u5DE5\u5177\u652F\u6301\u65F6\u5C55\u793A\u56FE\u7247\uFF0C\u5931\u8D25\u6216\u4E0D\u53EF\u7528\u5219\u5F53\u8F6E\u4EA4\u4ED8\u540C\u4E00\u94FE\u63A5\uFF0C\u4E0D\u7814\u7A76\u5DE5\u5177\u3001\u4E0D\u7B49\u5F85\u56FE\u7247\u786E\u8BA4\u3001\u4E0D\u91CD\u5EFA\u9875\u9762\u6216\u5BA3\u79F0\u4ED8\u6B3E\u3002";
 function canonicalDir(env = process.env) {
   const override = env.ITPAY_IDE_IMAGE_DIR_OVERRIDE;
   if (override && override.length > 0) return override;
-  return join2(tmpdir(), "itpay-v3-qr");
+  return join3(tmpdir(), "itpay-v3-qr");
 }
 __name(canonicalDir, "canonicalDir");
 function resolveIdeImageDirs(env = process.env) {
@@ -16520,8 +16745,8 @@ function resolveIdeImageDirs(env = process.env) {
 }
 __name(resolveIdeImageDirs, "resolveIdeImageDirs");
 function stableNameFor(kind, id) {
-  const safeID = id.replace(/[^a-zA-Z0-9_-]/g, "_") || randomUUID6();
-  const hash = createHash6("sha1").update(`${kind}:${id}`).digest("hex").slice(0, 6);
+  const safeID = id.replace(/[^a-zA-Z0-9_-]/g, "_") || randomUUID7();
+  const hash = createHash7("sha1").update(`${kind}:${id}`).digest("hex").slice(0, 6);
   return `itpay-v3-${kind}-${safeID}-${hash}`;
 }
 __name(stableNameFor, "stableNameFor");
@@ -16554,9 +16779,9 @@ async function detectImageFormat(url, fetchFn) {
 }
 __name(detectImageFormat, "detectImageFormat");
 function atomicWrite(filePath, body) {
-  const tmp = `${filePath}.tmp-${randomUUID6()}`;
+  const tmp = `${filePath}.tmp-${randomUUID7()}`;
   writeFileSync5(tmp, body);
-  renameSync3(tmp, filePath);
+  renameSync2(tmp, filePath);
 }
 __name(atomicWrite, "atomicWrite");
 function mirrorToDirs(fileName, body, dirs) {
@@ -16564,7 +16789,7 @@ function mirrorToDirs(fileName, body, dirs) {
   for (const dir of dirs.slice(1)) {
     try {
       mkdirSync6(dir, { recursive: true });
-      const target2 = join2(dir, fileName);
+      const target2 = join3(dir, fileName);
       atomicWrite(target2, body);
       written.push(target2);
     } catch {
@@ -16608,7 +16833,7 @@ async function downloadBrandQRToTmp(url, kind, id, options = {}) {
   if (!url) {
     return { ok: false, reason: "no qr_png_url on plan" };
   }
-  const stem = stableNameFor(kind, id ?? randomUUID6());
+  const stem = stableNameFor(kind, id ?? randomUUID7());
   const dirs = resolveIdeImageDirs();
   const canonical = dirs[0];
   if (!canonical) {
@@ -16636,7 +16861,7 @@ async function downloadBrandQRToTmp(url, kind, id, options = {}) {
       if (timer) clearTimeout(timer);
     }
     const fileName = `${stem}${detected.ext}`;
-    const filePath = join2(canonical, fileName);
+    const filePath = join3(canonical, fileName);
     atomicWrite(filePath, detected.body);
     const mirrors = mirrorToDirs(fileName, detected.body, dirs);
     return {
@@ -17306,6 +17531,23 @@ async function presentServiceCheckout(backend, config, serviceExecutionID, respo
   assertCheckoutPayable(checkout, authoritative, response.cart.cart_id, serviceExecutionID);
   if (authoritative) response.cart.items = authoritative.items;
   const checkoutID = checkout.checkout.checkout_id;
+  const agentType = options.agentType ?? config.agentType;
+  if (agentType === "dot" || agentType === "muse") {
+    const entry = checkout.official_entry;
+    let url;
+    try {
+      if (entry) url = new URL(entry.url);
+    } catch {
+    }
+    const readOriginal = { command: `itpay --agent-type ${agentType} services get ${serviceExecutionID} --json`, reason: "\u7528\u6237\u5B8C\u6210\u9875\u9762\u64CD\u4F5C\u540E\u8BFB\u53D6\u539F\u4EFB\u52A1\u4E8B\u5B9E" };
+    if (!entry || entry.access !== "account_session" || entry.url !== checkout.checkout_url || !url || !isPresentableURL(entry.url, config.baseURL) || url.protocol !== "https:" || url.username || url.password || url.search || url.hash || url.pathname !== `/checkout/${encodeURIComponent(checkoutID)}`) {
+      throw new CommandContractError("secure_handoff_unavailable", "original purchase has no verified account-session entry", "\u4FDD\u7559\u539F\u8D2D\u4E70\uFF1B\u5F53\u524D\u8D26\u53F7\u5B89\u5168\u5165\u53E3\u4E0D\u53EF\u7528\uFF0C\u4E0D\u5C55\u793A\u6216\u62FC\u63A5 bearer \u94FE\u63A5\uFF0C\u4E0D\u6362\u8EAB\u4EFD\u6216\u91CD\u5EFA\u8D2D\u4E70\u3002", [readOriginal], void 0, { service_execution_id: serviceExecutionID, checkout_id: checkoutID });
+    }
+    const { itinerary: itinerary2 } = authoritative ? projectCheckoutPresentation(authoritative, currentModel) : {};
+    const effects = { page_created: !response.handoff_reissued, page_reused: response.handoff_reissued === true, payment_requested: false, charged: false, human_page_action_required: true };
+    writeCommandEnvelope({ status: "human_checkout_required", result: { service_execution_id: serviceExecutionID, checkout_id: checkoutID, amount: formatMoney(checkout.checkout.amount_minor, checkout.checkout.currency), effects, ...itinerary2 ? { itinerary: itinerary2 } : {}, agent_facts: presentAgent({ service_execution_id: serviceExecutionID, checkout_id: checkoutID, status: "human_checkout_required", checkout: { official_entry: entry }, effects }, { allowedOrigins: OFFICIAL_BACKEND_URLS }) }, handoff: { url: entry.url, purpose: entry.purpose, access: entry.access, ...entry.expires_at ? { expires_at: entry.expires_at } : {} }, instruction: "\u7ACB\u5373\u5C55\u793A\u5B98\u65B9\u94FE\u63A5\u53CA\u91D1\u989D\uFF1B\u7528\u6237\u767B\u5F55\u53D1\u8D77\u8FDE\u63A5\u7684\u8D26\u53F7\u5B8C\u6210\u5F53\u524D\u6B65\u9AA4\u3002\u4E8C\u7EF4\u7801\u4E0D\u662F\u524D\u7F6E\u6761\u4EF6\uFF0C\u6253\u5F00\u94FE\u63A5\u4E0D\u4EE3\u8868\u4ED8\u6B3E\u6216\u51FA\u7968\u3002\u7528\u6237\u8868\u793A\u5B8C\u6210\u540E\u8BFB\u53D6\u539F\u4EFB\u52A1\u4E8B\u5B9E\uFF0C\u4E0D\u91CD\u590D\u786E\u8BA4\u3001\u6362\u5355\u6216\u81EA\u52A8\u4ED8\u6B3E\u3002", next: readOriginal, recovery: [] }, { ...options.jsonOutput !== void 0 ? { jsonOutput: options.jsonOutput } : {}, ...options.output ? { output: options.output } : {} });
+    return;
+  }
   const displayToken = checkout.display_token;
   const locale = normalizeCardLocale(options.locale);
   const checkoutURL = tokenizedCheckoutURL(checkout.checkout_url, displayToken, checkout.qr_payload);
@@ -17449,29 +17691,38 @@ async function runServicesQuote(backend, serviceExecutionID, capabilityID, input
 __name(runServicesQuote, "runServicesQuote");
 
 // src/commands/services/purchase.ts
-function invalid3() {
-  throw new CommandContractError("purchase_input_invalid", "purchase confirmation input is incomplete or invalid", "\u672C\u6B21\u672A\u53D1\u9001\u786E\u8BA4\u3002\u76F4\u63A5\u590D\u5236\u5F53\u524D\u5B8C\u6574 file_content\uFF1B\u6280\u672F\u5B57\u6BB5\u7531 Agent \u4FEE\u6B63\uFF0C\u53EA\u6709\u7F3A\u5931\u7684\u771F\u5B9E\u540C\u610F\u6216\u4EF7\u683C\u7EA6\u675F\u624D\u95EE\u7528\u6237\u3002", [], void 0, { request_sent: false });
+function invalid4(path3 = "input", allowed) {
+  throw new CommandContractError("purchase_input_invalid", "purchase confirmation input is incomplete or invalid", "\u672C\u6B21\u672A\u53D1\u9001\u786E\u8BA4\u3002\u6309\u5F53\u524D confirmation_schema \u548C\u5B8C\u6574 file_content \u4FEE\u6B63\u6280\u672F\u5B57\u6BB5\uFF1B\u53EA\u6709\u7F3A\u5931\u7684\u771F\u5B9E\u540C\u610F\u6216\u4EF7\u683C\u51B3\u5B9A\u624D\u95EE\u7528\u6237\u3002", [], void 0, { request_sent: false, field: path3, ...allowed ? { allowed_values: allowed } : {} });
 }
-__name(invalid3, "invalid");
+__name(invalid4, "invalid");
 function parsePurchaseConfirmation(raw) {
-  if (Object.keys(raw).some((key) => !["review_ref", "request_key", "user_approved", "user_answer", "price_policy"].includes(key))) invalid3();
+  const keys = purchaseContract.required;
+  for (const key of Object.keys(raw)) if (!keys.includes(key)) invalid4(key, keys);
+  if (typeof raw.review_ref !== "string" || !raw.review_ref) invalid4("review_ref");
+  if (typeof raw.request_key !== "string" || !raw.request_key || raw.request_key.length > purchaseContract.request_key_max_utf16_units) invalid4("request_key");
+  if (raw.user_approved !== true) invalid4("user_approved", ["true"]);
+  if (typeof raw.user_answer !== "string" || !raw.user_answer.trim()) invalid4("user_answer");
   const p = raw.price_policy;
-  if (typeof raw.review_ref !== "string" || !raw.review_ref || typeof raw.request_key !== "string" || !raw.request_key || raw.request_key.length > 200 || raw.user_approved !== true || typeof raw.user_answer !== "string" || !raw.user_answer.trim() || !p || typeof p !== "object" || Array.isArray(p)) invalid3();
-  if (!("mode" in p) || !("currency" in p) || typeof p.currency !== "string" || !p.currency || Object.keys(p).some((key) => !["mode", "currency", "amount_minor", "maximum_minor"].includes(key))) invalid3();
-  const safeAmount = /* @__PURE__ */ __name((n) => typeof n === "number" && Number.isSafeInteger(n) && n >= 0, "safeAmount");
-  if (p.mode === "exact" && "amount_minor" in p && safeAmount(p.amount_minor) && !("maximum_minor" in p)) return { review_ref: raw.review_ref, request_key: raw.request_key, user_approved: true, user_answer: raw.user_answer, price_policy: { mode: "exact", currency: p.currency, amount_minor: p.amount_minor } };
-  if (p.mode === "capped" && "maximum_minor" in p && safeAmount(p.maximum_minor) && !("amount_minor" in p)) return { review_ref: raw.review_ref, request_key: raw.request_key, user_approved: true, user_answer: raw.user_answer, price_policy: { mode: "capped", currency: p.currency, maximum_minor: p.maximum_minor } };
-  if (p.mode === "confirm_on_official_page" && !("amount_minor" in p) && !("maximum_minor" in p)) return { review_ref: raw.review_ref, request_key: raw.request_key, user_approved: true, user_answer: raw.user_answer, price_policy: { mode: "confirm_on_official_page", currency: p.currency } };
-  return invalid3();
+  if (!p || typeof p !== "object" || Array.isArray(p)) invalid4("price_policy");
+  if (!("mode" in p) || typeof p.mode !== "string" || !Object.hasOwn(purchaseContract.modes, p.mode)) invalid4("price_policy.mode", Object.keys(purchaseContract.modes));
+  if (!("currency" in p) || typeof p.currency !== "string" || !p.currency) invalid4("price_policy.currency");
+  const safeAmount = /* @__PURE__ */ __name((n) => typeof n === "number" && Number.isSafeInteger(n) && n >= 0 && n <= purchaseContract.amount_maximum, "safeAmount");
+  const amountField = p.mode === "exact" ? purchaseContract.modes.exact : p.mode === "capped" ? purchaseContract.modes.capped : null;
+  const allowedFields = ["mode", "currency", ...amountField ? [amountField] : []];
+  for (const key of Object.keys(p)) if (!allowedFields.includes(key)) invalid4(`price_policy.${key}`, allowedFields);
+  if (p.mode === "exact" && "amount_minor" in p && safeAmount(p.amount_minor)) return { review_ref: raw.review_ref, request_key: raw.request_key, user_approved: true, user_answer: raw.user_answer, price_policy: { mode: "exact", currency: p.currency, amount_minor: p.amount_minor } };
+  if (p.mode === "capped" && "maximum_minor" in p && safeAmount(p.maximum_minor)) return { review_ref: raw.review_ref, request_key: raw.request_key, user_approved: true, user_answer: raw.user_answer, price_policy: { mode: "capped", currency: p.currency, maximum_minor: p.maximum_minor } };
+  if (p.mode === "confirm_on_official_page") return { review_ref: raw.review_ref, request_key: raw.request_key, user_approved: true, user_answer: raw.user_answer, price_policy: { mode: "confirm_on_official_page", currency: p.currency } };
+  return invalid4(`price_policy.${amountField}`);
 }
 __name(parsePurchaseConfirmation, "parsePurchaseConfirmation");
 async function runServicesPurchase(backend, config, id, input, options = {}) {
   const confirm = input ? parsePurchaseConfirmation(input) : void 0;
-  if (confirm && options.resume) invalid3();
+  if (confirm && options.resume) invalid4();
   const contextError = validateContext(options.host ?? "terminal", options.target);
   if (contextError) throw new CommandContractError(contextError.code, contextError.message, "\u8865\u9F50\u5F53\u524D\u53EF\u4FE1 Host/target\uFF1B\u672C\u6B21\u672A\u53D1\u9001\u786E\u8BA4\u3002", [], void 0, { request_sent: false });
   const seconds = options.timeoutSeconds ?? 60;
-  if (!Number.isFinite(seconds) || seconds <= 0 || seconds > 120) invalid3();
+  if (!Number.isFinite(seconds) || seconds <= 0 || seconds > 120) invalid4();
   let deadline = options.deadline ?? Date.now() + seconds * 1e3;
   let failureStage = confirm ? "confirm_purchase" : options.resume ? "resume_purchase" : "read_purchase_review";
   try {
@@ -17540,11 +17791,11 @@ __name(runAftercareRespond, "runAftercareRespond");
 import { rmSync } from "node:fs";
 
 // src/state/auth_storage.ts
-import { createHash as createHash7 } from "node:crypto";
-import { dirname as dirname4, resolve as resolve4 } from "node:path";
-import { existsSync as existsSync4, mkdirSync as mkdirSync7, readFileSync as readFileSync8, renameSync as renameSync4, writeFileSync as writeFileSync6 } from "node:fs";
+import { createHash as createHash8 } from "node:crypto";
+import { dirname as dirname3, resolve as resolve4 } from "node:path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync7, readFileSync as readFileSync8, renameSync as renameSync3, writeFileSync as writeFileSync6 } from "node:fs";
 function authStatePath(baseURL, env, purpose) {
-  return resolve4(stateDir(env), `${purpose}-${createHash7("sha256").update(baseURL).digest("hex").slice(0, 16)}.json`);
+  return resolve4(stateDir(env), `${purpose}-${createHash8("sha256").update(baseURL).digest("hex").slice(0, 16)}.json`);
 }
 __name(authStatePath, "authStatePath");
 function readAuthState(baseURL, env, purpose) {
@@ -17557,10 +17808,10 @@ function readAuthState(baseURL, env, purpose) {
 __name(readAuthState, "readAuthState");
 function saveAuthState(state, env, purpose) {
   const path3 = authStatePath(state.baseURL, env, purpose);
-  mkdirSync7(dirname4(path3), { recursive: true, mode: 448 });
+  mkdirSync7(dirname3(path3), { recursive: true, mode: 448 });
   const tmp = `${path3}.${process.pid}.tmp`;
   writeFileSync6(tmp, JSON.stringify(state), { mode: 384 });
-  renameSync4(tmp, path3);
+  renameSync3(tmp, path3);
 }
 __name(saveAuthState, "saveAuthState");
 
@@ -18896,9 +19147,9 @@ var {
 } = import_index.default;
 
 // src/state/cart_session.ts
-import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync8, readFileSync as readFileSync9, renameSync as renameSync5, writeFileSync as writeFileSync7 } from "node:fs";
-import { randomUUID as randomUUID7 } from "node:crypto";
-import { dirname as dirname5 } from "node:path";
+import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync8, readFileSync as readFileSync9, renameSync as renameSync4, writeFileSync as writeFileSync7 } from "node:fs";
+import { randomUUID as randomUUID8 } from "node:crypto";
+import { dirname as dirname4 } from "node:path";
 var CartSession = class _CartSession {
   static {
     __name(this, "CartSession");
@@ -18947,11 +19198,11 @@ var CartSession = class _CartSession {
     };
     const contents = JSON.stringify(toSave, null, 2);
     if (existsSync5(path3) && readFileSync9(path3, "utf-8") === contents) return;
-    mkdirSync8(dirname5(path3), { recursive: true, mode: 448 });
-    const temporary = `${path3}.${process.pid}.${randomUUID7()}.tmp`;
+    mkdirSync8(dirname4(path3), { recursive: true, mode: 448 });
+    const temporary = `${path3}.${process.pid}.${randomUUID8()}.tmp`;
     writeFileSync7(temporary, contents, { encoding: "utf-8", mode: 384 });
     chmodSync2(temporary, 384);
-    renameSync5(temporary, path3);
+    renameSync4(temporary, path3);
     chmodSync2(path3, 384);
   }
   add(item) {
@@ -19075,6 +19326,8 @@ __name(versionParts, "versionParts");
 
 // src/commands/install.ts
 var INSTALL_AGENT_TYPES = [
+  "dot",
+  "muse",
   "codex-desktop",
   "codex-cli",
   "claude-code-desktop",
@@ -19083,10 +19336,14 @@ var INSTALL_AGENT_TYPES = [
   "zcode",
   "doubao-work",
   "kimi-code",
-  "openclaw"
+  "openclaw",
+  "hermes"
 ];
 var CODEX_WAIT_GUIDANCE = "Codex \u5BBF\u4E3B\u7B49\u5F85\uFF1A\u4FDD\u7559\u5B8C\u6574\u5DE5\u5177\u8FD4\u56DE\uFF0C\u6309\u5B9E\u9645\u8FD4\u56DE\u7684\u4F1A\u8BDD\u53E5\u67C4\u53CA\u5F53\u524D\u5BBF\u4E3B\u7EED\u8BFB\u5DE5\u5177\u6536\u53D6\u6700\u7EC8\u8F93\u51FA\uFF0C\u4E0D\u8981\u53EA\u53D6 stdout\u3002\u82E5\u4F7F\u7528 functions.exec \u5305\u88C5\uFF0C\u53EF\u7528 text(await tools.exec_command(...))\uFF1B\u5185\u5C42\u6709 session_id \u65F6\u7528 write_stdin\uFF0C\u5916\u5C42\u8FD4\u56DE\u8FD0\u884C cell \u65F6\u624D\u7528 wait\u3002\u6CA1\u6709\u8BE5\u5305\u88C5\u65F6\u6309\u5BBF\u4E3B\u5B9E\u9645\u5DE5\u5177\u64CD\u4F5C\u3002\u5148\u6536\u53D6\u6700\u7EC8\u8F93\u51FA\uFF0C\u518D\u6267\u884C CLI \u4E1A\u52A1 next\uFF1B\u4E0D\u8981\u91CD\u590D\u63D0\u4EA4\u3002";
 var INSTRUCTIONS = {
+  hermes: "\u4FDD\u6301\u771F\u5B9E hermes Agent Type\uFF1B\u6309\u5F53\u524D\u5B9E\u9645\u5BBF\u4E3B\u5448\u73B0\u5B98\u65B9\u94FE\u63A5\uFF0C\u672A\u77E5\u663E\u793A\u80FD\u529B\u5982\u5B9E\u4FDD\u7559\u3002\u6CBF\u540C\u4E00 launcher\u3001Backend \u4E0E ITPAY_STATE_DIR \u6062\u590D\uFF0C\u4E0D\u5207\u6362\u8EAB\u4EFD\u6216\u91CD\u7F6E\u989D\u5EA6\u3002",
+  dot: "\u4F7F\u7528\u771F\u5B9E dot \u7C7B\u578B\uFF1B\u4E91\u7AEF\u6267\u884C\u4F4D\u7F6E\u4E0E\u7528\u6237\u663E\u793A\u7AEF\u5206\u522B\u5224\u65AD\u3002\u5C55\u793A\u5B98\u65B9\u53EF\u70B9\u51FB\u94FE\u63A5\uFF0C\u4E8C\u7EF4\u7801\u53EF\u7528\u65F6\u589E\u5F3A\u5C55\u793A\uFF1B\u6D4F\u89C8\u5668\u6253\u5F00\u4E0D\u7B49\u4E8E\u7528\u6237\u5DF2\u770B\u5230\u3002\u540E\u7EED\u4FDD\u6301\u540C\u4E00 launcher\u3001Backend \u548C ITPAY_STATE_DIR\u3002",
+  muse: "\u4F7F\u7528\u771F\u5B9E muse \u7C7B\u578B\uFF1B\u4FDD\u7559\u5BBF\u4E3B\u539F\u751F\u6279\u51C6\uFF0C\u4E0D\u7528\u804A\u5929\u540C\u610F\u66FF\u4EE3\u3002\u4E91\u7AEF\u53EF\u5199\u76EE\u5F55\u4E0D\u7B49\u4E8E\u8DE8\u4F1A\u8BDD\u6301\u4E45\uFF0C\u663E\u793A\u80FD\u529B\u672A\u77E5\u65F6\u5982\u5B9E\u62A5\u544A\uFF1B\u6CBF\u540C\u4E00 launcher\u3001Backend \u548C ITPAY_STATE_DIR \u6062\u590D\u539F\u4EFB\u52A1\u3002",
   "codex-desktop": "\u5728 Codex Desktop \u4E2D\u59CB\u7EC8\u4F20\u8FD9\u4E2A Agent Type\uFF1B\u4ED8\u6B3E\u65F6\u628A\u8FD4\u56DE\u7684\u4E8C\u7EF4\u7801\u548C\u94FE\u63A5\u5B9E\u9645\u5C55\u793A\u5230\u5F53\u524D\u5BF9\u8BDD\u3002",
   "codex-cli": "\u5728 Codex CLI \u4E2D\u59CB\u7EC8\u4F20\u8FD9\u4E2A Agent Type\uFF1B\u4ED8\u6B3E\u4EA4\u63A5\u53EA\u5E94\u663E\u793A\u5728\u7528\u6237\u53EF\u89C1\u7EC8\u7AEF\u3002",
   "claude-code-desktop": "\u5728 Claude Code Desktop \u4E2D\u59CB\u7EC8\u4F20\u8FD9\u4E2A Agent Type\uFF1B\u4ED8\u6B3E\u65F6\u628A\u8FD4\u56DE\u7684\u4E8C\u7EF4\u7801\u548C\u94FE\u63A5\u5B9E\u9645\u5C55\u793A\u5230\u5F53\u524D\u5BF9\u8BDD\u3002",
@@ -19148,17 +19405,23 @@ function installDefinition(agentType) {
 }
 __name(installDefinition, "installDefinition");
 
+// src/commands/skill.ts
+import { createHash as createHash9 } from "node:crypto";
+
+// src/state/skill_identity.generated.ts
+var CANONICAL_SKILL_SHA256 = "9e36b56ef726cd1c7db603474fb977fa3cc5b84ef6b005d007e9f322ac534ce7";
+
 // src/commands/skill.ts
 import { existsSync as existsSync7, readFileSync as readFileSync11 } from "node:fs";
 import { resolve as resolve6 } from "node:path";
 
 // src/state/package_resources.ts
 import { existsSync as existsSync6, readFileSync as readFileSync10 } from "node:fs";
-import { basename as basename2, dirname as dirname6, resolve as resolve5 } from "node:path";
+import { basename as basename2, dirname as dirname5, resolve as resolve5 } from "node:path";
 import { fileURLToPath } from "node:url";
 function packageResourcePath(...segments) {
   const modulePath = fileURLToPath(import.meta.url);
-  const root = resolve5(dirname6(modulePath), "..", "..");
+  const root = resolve5(dirname5(modulePath), "..", "..");
   if (!basename2(modulePath).startsWith("package_resources.") && basename2(modulePath) !== "main.js") throw new Error("unsupported CLI resource layout");
   const metadata = resolve5(root, "package.json");
   if (!existsSync6(metadata) || JSON.parse(readFileSync10(metadata, "utf8")).name !== "@itpay/cli") throw new Error("current CLI package resources are unavailable");
@@ -19170,7 +19433,7 @@ __name(packageResourcePath, "packageResourcePath");
 var ITPAY_SKILL = "itpay";
 function runSkillShow(name, options = {}) {
   const normalized = name.trim().toLowerCase();
-  if (normalized !== ITPAY_SKILL) {
+  if (normalized !== ITPAY_SKILL && normalized !== "itpay-buyer") {
     throw new CommandContractError(
       "skill_not_found",
       `skill not found: ${name}`,
@@ -19228,8 +19491,12 @@ ${CODEX_WAIT_GUIDANCE}
 }
 __name(runSkillShow, "runSkillShow");
 function packagedSkill() {
-  const path3 = findSkillPath(false);
+  let path3 = findSkillPath(false);
+  if (!existsSync7(path3) && process.env.ITPAY_CLI_SKILLS_DIR) path3 = findSkillPath();
   const content = readFileSync11(path3, "utf8");
+  if (createHash9("sha256").update(content).digest("hex") !== CANONICAL_SKILL_SHA256) {
+    throw new CommandContractError("skill_override_mismatch", "Skill does not match this pinned CLI build", "\u4F7F\u7528\u5F53\u524D\u5305\u540C\u6E90\u7684\u5B8C\u6574 Skill\uFF1B\u4FDD\u7559\u539F\u4EFB\u52A1\u548C\u8EAB\u4EFD\uFF0C\u4E0D\u5B89\u88C5\u53E6\u4E00\u5957 CLI\u3002", []);
+  }
   validateSkill(content);
   return { path: path3, content };
 }
@@ -19297,6 +19564,13 @@ async function runSetup(backend, config, skillPath, options = {}) {
       cli_version: CLI_VERSION2,
       backend_url: config.baseURL,
       agent_type: config.agentType,
+      state_directory: stateDir(),
+      state_persistence: "unverified_across_sessions",
+      skill_readable: true,
+      skill_written: "unknown",
+      skill_discoverable: "unknown",
+      execution_position: "unknown",
+      presentation_surface: "unknown",
       device_status: "ready",
       account_status: account.status,
       skill_path: skillPath,
@@ -19745,63 +20019,6 @@ function formatProductMoney(amountMinor, currency) {
 }
 __name(formatProductMoney, "formatProductMoney");
 
-// src/render/browser.ts
-import { spawn } from "node:child_process";
-import { platform } from "node:os";
-function isPresentableURL(raw, baseURL, env = process.env) {
-  let url;
-  try {
-    url = new URL(raw);
-  } catch {
-    return false;
-  }
-  if (url.username || url.password) return false;
-  if (env.ITPAY_CLI_DEV === "1" && /^http:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(url.origin)) return true;
-  if (url.protocol !== "https:") return false;
-  const allowedOrigins = /* @__PURE__ */ new Set(["https://app.itpay.ai", "https://sandbox.itpay.ai", "https://dev.itpay.ai"]);
-  if (baseURL) {
-    try {
-      allowedOrigins.add(new URL(baseURL).origin);
-    } catch {
-    }
-  }
-  return allowedOrigins.has(url.origin);
-}
-__name(isPresentableURL, "isPresentableURL");
-function openInSystemBrowser(raw, baseURL, env = process.env) {
-  if (!isPresentableURL(raw, baseURL, env)) {
-    return Promise.resolve({ status: "failed", reason: "url_rejected" });
-  }
-  const [command, args] = openerArgv(raw);
-  if (!command) {
-    return Promise.resolve({ status: "unavailable", reason: "no system opener on this platform" });
-  }
-  return new Promise((resolvePromise) => {
-    const child = spawn(command, args, { detached: true, stdio: "ignore" });
-    child.once("error", (error) => resolvePromise({ status: "failed", reason: error.message }));
-    child.once("spawn", () => {
-      child.unref();
-      resolvePromise({ status: "dispatch_accepted", argv: [command, ...args] });
-    });
-  });
-}
-__name(openInSystemBrowser, "openInSystemBrowser");
-function openerArgv(url) {
-  switch (platform()) {
-    case "darwin":
-      return ["open", [url]];
-    case "win32":
-      return ["cmd.exe", ["/c", "start", "", url]];
-    case "linux":
-    case "freebsd":
-    case "openbsd":
-      return ["xdg-open", [url]];
-    default:
-      return [void 0, []];
-  }
-}
-__name(openerArgv, "openerArgv");
-
 // src/commands/presentation.ts
 var yes = /* @__PURE__ */ __name((value) => value === "yes", "yes");
 function resolvePresentation(input) {
@@ -21385,7 +21602,7 @@ function writeCartNextEnvelope(envelope, options) {
 __name(writeCartNextEnvelope, "writeCartNextEnvelope");
 
 // src/commands/docs.ts
-import { readFileSync as readFileSync12, readdirSync as readdirSync3 } from "node:fs";
+import { readFileSync as readFileSync12, readdirSync as readdirSync4 } from "node:fs";
 import { resolve as resolve7 } from "node:path";
 function runDocsList(options = {}) {
   const topics = loadDocs().map(({ topic, title, purpose }) => ({ topic, title, purpose }));
@@ -21460,11 +21677,11 @@ function runDocsSearch(query, options = {}) {
 __name(runDocsSearch, "runDocsSearch");
 function loadDocs() {
   const docsDir = findDocsDir();
-  const files = readdirSync3(docsDir).filter((file) => file.endsWith(".json")).sort();
+  const files = readdirSync4(docsDir).filter((file) => file.endsWith(".json")).sort();
   const docs = files.map((file) => parseDoc(readFileSync12(resolve7(docsDir, file), "utf8"), file));
   if (process.env.ITPAY_CLI_DOCS_DIR) {
     const canonical = packageResourcePath("docs", "agent", "buyer");
-    const expectedFiles = readdirSync3(canonical).filter((file) => file.endsWith(".json")).sort();
+    const expectedFiles = readdirSync4(canonical).filter((file) => file.endsWith(".json")).sort();
     if (JSON.stringify(files) !== JSON.stringify(expectedFiles) || files.some((file, index) => JSON.stringify(docs[index]) !== JSON.stringify(parseDoc(readFileSync12(resolve7(canonical, file), "utf8"), file)))) {
       throw new CommandContractError(
         "docs_override_mismatch",
@@ -21609,11 +21826,11 @@ function parseRequiredContactFields(value) {
     return void 0;
   }
   const values = value.split(",").map((item) => item.trim().toLowerCase()).filter(Boolean);
-  const invalid4 = values.filter((item) => item !== "email" && item !== "phone");
-  if (invalid4.length > 0) {
+  const invalid5 = values.filter((item) => item !== "email" && item !== "phone");
+  if (invalid5.length > 0) {
     throw new CommandContractError(
       "contact_field_invalid",
-      `unsupported required contact fields: ${invalid4.join(", ")}`,
+      `unsupported required contact fields: ${invalid5.join(", ")}`,
       "--require-contact \u53EA\u63A5\u53D7 email\u3001phone \u6216\u4E8C\u8005\u7EC4\u5408\u3002",
       [{ command: "itpay buy --help", reason: "\u67E5\u770B contact \u53C2\u6570" }]
     );
@@ -21623,8 +21840,8 @@ function parseRequiredContactFields(value) {
 }
 __name(parseRequiredContactFields, "parseRequiredContactFields");
 function positiveInteger(value, name) {
-  const text = String(value ?? "");
-  if (!/^[1-9]\d*$/.test(text)) {
+  const text2 = String(value ?? "");
+  if (!/^[1-9]\d*$/.test(text2)) {
     throw new CommandContractError(
       "buy_parameter_invalid",
       `${name} must be a positive integer`,
@@ -21632,7 +21849,7 @@ function positiveInteger(value, name) {
       [{ command: "itpay buy --help", reason: "\u67E5\u770B\u53C2\u6570\u683C\u5F0F" }]
     );
   }
-  return Number(text);
+  return Number(text2);
 }
 __name(positiveInteger, "positiveInteger");
 function resolveCheckoutPresentationArgs(input) {
@@ -21723,14 +21940,14 @@ function reportCLIError(error, contract) {
           } : {}
         }
       } : {},
-      instruction: incompatible ? "\u5F53\u524D CLI \u4E0E Backend \u5408\u7EA6\u4E0D\u517C\u5BB9\u6216\u65E0\u6CD5\u6838\u9A8C\u3002minimum_cli_version \u4EC5\u662F\u534F\u8BAE\u95E8\u69DB\uFF0C\u4E0D\u662F\u5DF2\u9A8C\u8BC1\u7684\u63A8\u8350\u5B89\u88C5\u5305\u3002\u505C\u6B62\u672C\u8F6E\uFF0C\u8BF7\u7EF4\u62A4\u65B9\u63D0\u4F9B\u4E0E\u5F53\u524D Backend \u914D\u5957\u7684\u5236\u54C1\uFF1B\u4E0D\u8981\u731C\u7248\u672C\u3001\u964D\u7EA7\u3001\u5207\u6362 Agent Type \u6216\u5220\u9664 Device \u8EAB\u4EFD\u3002" : backendInternal ? "\u544A\u8BC9\u7528\u6237 ItPay \u5F53\u524D\u6682\u65F6\u65E0\u6CD5\u5B8C\u6210\u8FD9\u9879\u670D\u52A1\u5E76\u505C\u6B62\u3002\u4E0D\u8981\u8F6C\u8FF0\u5185\u90E8\u9519\u8BEF\u3001\u91CD\u8BD5\u3001\u4FEE\u6539\u8EAB\u4EFD\u3001\u521B\u5EFA\u66FF\u4EE3\u670D\u52A1\u6216\u8FDB\u5165\u4EFB\u4F55\u4ED8\u8D39\u8DEF\u5F84\u3002" : providerConnectionUnavailable ? "\u544A\u8BC9\u7528\u6237\u672C\u6B21\u67E5\u8BE2\u6CA1\u6709\u53D1\u9001\u5230\u6570\u636E\u6765\u6E90\uFF0C\u514D\u8D39\u989D\u5EA6\u5DF2\u4FDD\u7559\uFF0C\u7136\u540E\u505C\u6B62\u3002\u4E0D\u8981\u8F6C\u8FF0\u6280\u672F\u9519\u8BEF\u3001\u81EA\u52A8\u91CD\u8BD5\u6216\u8FDB\u5165\u4ED8\u8D39\u8DEF\u5F84\uFF1B\u53EA\u6709\u670D\u52A1\u6062\u590D\u4E14\u7528\u6237\u660E\u786E\u8981\u6C42\u91CD\u65B0\u67E5\u8BE2\u540E\u624D\u80FD\u5F00\u59CB\u65B0\u7684\u67E5\u8BE2\u3002" : providerTemporary ? "\u544A\u8BC9\u7528\u6237\u6570\u636E\u670D\u52A1\u6682\u65F6\u4E0D\u53EF\u7528\uFF0C\u5E76\u6309 result.quota \u8BF4\u660E\u989D\u5EA6\u662F\u5426\u4FDD\u7559\uFF0C\u7136\u540E\u505C\u6B62\u3002\u4E0D\u8981\u8F6C\u8FF0\u6280\u672F\u9519\u8BEF\u3001\u81EA\u52A8\u91CD\u8BD5\u6216\u521B\u5EFA\u65B0\u67E5\u8BE2\uFF1B\u53EA\u6709\u7528\u6237\u4E4B\u540E\u660E\u786E\u63D0\u51FA\u65B0\u8BF7\u6C42\u624D\u53EF\u91CD\u65B0\u5F00\u59CB\u3002" : providerInputRejected ? "\u544A\u8BC9\u7528\u6237\u6570\u636E\u6765\u6E90\u660E\u786E\u8868\u793A\u5F53\u524D\u8F93\u5165\u65E0\u6548\uFF0C\u5E76\u6309 result.quota \u8BF4\u660E\u989D\u5EA6\u72B6\u6001\uFF0C\u7136\u540E\u505C\u6B62\u3002\u4E0D\u8981\u8F6C\u8FF0\u5185\u90E8\u9519\u8BEF\u3001\u81EA\u884C\u4FEE\u6539\u8F93\u5165\u3001\u91CD\u8BD5\u6216\u521B\u5EFA\u65B0\u67E5\u8BE2\uFF1B\u53EA\u6709\u7528\u6237\u660E\u786E\u63D0\u4F9B\u65B0\u8F93\u5165\u540E\u624D\u80FD\u91CD\u65B0\u67E5\u8BE2\u3002" : providerContractMismatch ? "\u544A\u8BC9\u7528\u6237\u5E73\u53F0\u6682\u65F6\u65E0\u6CD5\u6B63\u786E\u89E3\u91CA\u6570\u636E\u6765\u6E90\u7684\u54CD\u5E94\uFF0C\u8FD9\u4E0D\u662F\u7528\u6237\u8F93\u5165\u95EE\u9898\uFF0C\u5E76\u6309 result.quota \u8BF4\u660E\u989D\u5EA6\u72B6\u6001\u3002\u7ACB\u5373\u505C\u6B62\uFF0C\u4E0D\u8981\u4FEE\u6539\u8F93\u5165\u3001\u91CD\u8BD5\u3001\u521B\u5EFA\u65B0\u67E5\u8BE2\u6216\u8FDB\u5165\u4ED8\u8D39\u8DEF\u5F84\u3002" : providerRejected ? "\u544A\u8BC9\u7528\u6237\u6570\u636E\u6765\u6E90\u6CA1\u6709\u63A5\u53D7\u672C\u6B21\u8BF7\u6C42\uFF0C\u4F46\u6CA1\u6709\u8BF4\u660E\u662F\u8F93\u5165\u9519\u8BEF\uFF0C\u5E76\u6309 result.quota \u8BF4\u660E\u989D\u5EA6\u72B6\u6001\uFF0C\u7136\u540E\u505C\u6B62\u3002\u4E0D\u8981\u8F6C\u8FF0\u5185\u90E8\u9519\u8BEF\u3001\u4FEE\u6539\u8F93\u5165\u3001\u91CD\u8BD5\u6216\u521B\u5EFA\u65B0\u67E5\u8BE2\u3002" : capabilityInputInvalid ? "Agent\u6309\u5F53\u524D\u5408\u540C\u6A21\u677F\u4FEE\u6B63\u5B57\u6BB5\u548CJSON\u5C42\u7EA7\uFF0C\u4FDD\u7559\u7528\u6237\u539F\u59CB\u9700\u6C42\uFF0C\u7EE7\u7EED\u540C\u4E00\u6B21\u670D\u52A1\u3002\u4E0D\u8981\u8BA9\u7528\u6237\u4FEE\u6280\u672F\u8F93\u5165\uFF0C\u53EA\u6709\u771F\u5B9E\u4E1A\u52A1\u6B67\u4E49\u624D\u8BE2\u95EE\u3002" : transportError ? contract?.initialization ? "\u672C\u8F6E\u521D\u59CB\u5316\u68C0\u67E5\u672A\u5B8C\u6210\uFF1BCLI \u5DF2\u7ED3\u675F\u6709\u9650\u7684\u7F51\u7EDC\u5C1D\u8BD5\uFF0C\u5C1A\u672A\u786E\u8BA4\u540E\u7AEF\u6216\u8BBE\u5907\u5C31\u7EEA\u3002\u7ED3\u675F\u672C\u8F6E\uFF0C\u7F51\u7EDC\u6062\u590D\u540E\u53EF\u91CD\u65B0\u68C0\u67E5\uFF1B\u4E0D\u8981\u7EE7\u7EED\u767B\u5F55\u6216\u4E1A\u52A1\u64CD\u4F5C\u3002" : transportError.attempts > 1 ? "\u4E34\u65F6\u7F51\u7EDC\u6545\u969C\uFF1BCLI \u5DF2\u4EC5\u5BF9\u53EF\u5B89\u5168\u91CD\u653E\u7684\u64CD\u4F5C\u5B8C\u6210\u6709\u9650\u81EA\u52A8\u91CD\u8BD5\uFF0C\u4F46\u4ECD\u672A\u83B7\u5F97\u5B8C\u6574\u54CD\u5E94\u3002\u6309 recovery \u67E5\u8BE2\u540C\u4E00\u8D44\u6E90\u7684\u6743\u5A01\u72B6\u6001\uFF1B\u4E0D\u8981\u521B\u5EFA\u66FF\u4EE3 Checkout\u3001Execution\u3001Payment \u6216 Refund\u3002" : "\u7F51\u7EDC\u5728\u5B8C\u6574\u54CD\u5E94\u524D\u4E2D\u65AD\uFF1B\u5F53\u524D\u5199\u64CD\u4F5C\u6CA1\u6709\u5B89\u5168\u91CD\u653E\u5408\u540C\uFF0C\u56E0\u6B64 CLI \u672A\u81EA\u52A8\u91CD\u8BD5\u3002\u6309 recovery \u67E5\u8BE2\u6743\u5A01\u72B6\u6001\uFF1B\u4E0D\u8981\u539F\u6837\u91CD\u653E\u6216\u521B\u5EFA\u66FF\u4EE3 Checkout\u3001Execution\u3001Payment \u6216 Refund\u3002" : backendOverrideError ? "\u79FB\u9664 ITPAY_BACKEND_URL \u4F7F\u7528\u6B63\u5F0F\u73AF\u5883\uFF0C\u6216\u6309\u5F53\u524D\u6D4B\u8BD5\u76EE\u6807\u51C6\u786E\u8BBE\u7F6E\u4E3A https://sandbox.itpay.ai \u6216 https://dev.itpay.ai\u3002\u4E0D\u8981\u901A\u8FC7\u5207\u6362\u73AF\u5883\u89C4\u907F\u5F53\u524D\u9519\u8BEF\u3002" : commandError?.instruction ?? authorizationInstruction ?? contract?.instruction ?? "\u68C0\u67E5\u547D\u4EE4\u53C2\u6570\u540E\u91CD\u8BD5\u3002",
+      instruction: incompatible ? "\u5F53\u524D CLI \u4E0E Backend \u5408\u7EA6\u4E0D\u517C\u5BB9\u6216\u65E0\u6CD5\u6838\u9A8C\u3002minimum_cli_version \u4EC5\u662F\u534F\u8BAE\u95E8\u69DB\uFF0C\u4E0D\u662F\u5DF2\u9A8C\u8BC1\u7684\u63A8\u8350\u5B89\u88C5\u5305\u3002\u505C\u6B62\u672C\u8F6E\uFF0C\u8BF7\u7EF4\u62A4\u65B9\u63D0\u4F9B\u4E0E\u5F53\u524D Backend \u914D\u5957\u7684\u5236\u54C1\uFF1B\u4E0D\u8981\u731C\u7248\u672C\u3001\u964D\u7EA7\u3001\u5207\u6362 Agent Type \u6216\u5220\u9664 Device \u8EAB\u4EFD\u3002" : backendInternal ? "\u544A\u8BC9\u7528\u6237 ItPay \u5F53\u524D\u6682\u65F6\u65E0\u6CD5\u5B8C\u6210\u8FD9\u9879\u670D\u52A1\u5E76\u505C\u6B62\u3002\u4E0D\u8981\u8F6C\u8FF0\u5185\u90E8\u9519\u8BEF\u3001\u91CD\u8BD5\u3001\u4FEE\u6539\u8EAB\u4EFD\u3001\u521B\u5EFA\u66FF\u4EE3\u670D\u52A1\u6216\u8FDB\u5165\u4EFB\u4F55\u4ED8\u8D39\u8DEF\u5F84\u3002" : providerConnectionUnavailable ? "\u544A\u8BC9\u7528\u6237\u672C\u6B21\u67E5\u8BE2\u6CA1\u6709\u53D1\u9001\u5230\u6570\u636E\u6765\u6E90\uFF0C\u514D\u8D39\u989D\u5EA6\u5DF2\u4FDD\u7559\uFF0C\u7136\u540E\u505C\u6B62\u3002\u4E0D\u8981\u8F6C\u8FF0\u6280\u672F\u9519\u8BEF\u3001\u81EA\u52A8\u91CD\u8BD5\u6216\u8FDB\u5165\u4ED8\u8D39\u8DEF\u5F84\uFF1B\u53EA\u6709\u670D\u52A1\u6062\u590D\u4E14\u7528\u6237\u660E\u786E\u8981\u6C42\u91CD\u65B0\u67E5\u8BE2\u540E\u624D\u80FD\u5F00\u59CB\u65B0\u7684\u67E5\u8BE2\u3002" : providerTemporary ? "\u544A\u8BC9\u7528\u6237\u6570\u636E\u670D\u52A1\u6682\u65F6\u4E0D\u53EF\u7528\uFF0C\u5E76\u6309 result.quota \u8BF4\u660E\u989D\u5EA6\u662F\u5426\u4FDD\u7559\uFF0C\u7136\u540E\u505C\u6B62\u3002\u4E0D\u8981\u8F6C\u8FF0\u6280\u672F\u9519\u8BEF\u3001\u81EA\u52A8\u91CD\u8BD5\u6216\u521B\u5EFA\u65B0\u67E5\u8BE2\uFF1B\u53EA\u6709\u7528\u6237\u4E4B\u540E\u660E\u786E\u63D0\u51FA\u65B0\u8BF7\u6C42\u624D\u53EF\u91CD\u65B0\u5F00\u59CB\u3002" : providerInputRejected ? "\u544A\u8BC9\u7528\u6237\u6570\u636E\u6765\u6E90\u660E\u786E\u8868\u793A\u5F53\u524D\u8F93\u5165\u65E0\u6548\uFF0C\u5E76\u6309 result.quota \u8BF4\u660E\u989D\u5EA6\u72B6\u6001\uFF0C\u7136\u540E\u505C\u6B62\u3002\u4E0D\u8981\u8F6C\u8FF0\u5185\u90E8\u9519\u8BEF\u3001\u81EA\u884C\u4FEE\u6539\u8F93\u5165\u3001\u91CD\u8BD5\u6216\u521B\u5EFA\u65B0\u67E5\u8BE2\uFF1B\u53EA\u6709\u7528\u6237\u660E\u786E\u63D0\u4F9B\u65B0\u8F93\u5165\u540E\u624D\u80FD\u91CD\u65B0\u67E5\u8BE2\u3002" : providerContractMismatch ? "\u544A\u8BC9\u7528\u6237\u5E73\u53F0\u6682\u65F6\u65E0\u6CD5\u6B63\u786E\u89E3\u91CA\u6570\u636E\u6765\u6E90\u7684\u54CD\u5E94\uFF0C\u8FD9\u4E0D\u662F\u7528\u6237\u8F93\u5165\u95EE\u9898\uFF0C\u5E76\u6309 result.quota \u8BF4\u660E\u989D\u5EA6\u72B6\u6001\u3002\u7ACB\u5373\u505C\u6B62\uFF0C\u4E0D\u8981\u4FEE\u6539\u8F93\u5165\u3001\u91CD\u8BD5\u3001\u521B\u5EFA\u65B0\u67E5\u8BE2\u6216\u8FDB\u5165\u4ED8\u8D39\u8DEF\u5F84\u3002" : providerRejected ? "\u544A\u8BC9\u7528\u6237\u6570\u636E\u6765\u6E90\u6CA1\u6709\u63A5\u53D7\u672C\u6B21\u8BF7\u6C42\uFF0C\u4F46\u6CA1\u6709\u8BF4\u660E\u662F\u8F93\u5165\u9519\u8BEF\uFF0C\u5E76\u6309 result.quota \u8BF4\u660E\u989D\u5EA6\u72B6\u6001\uFF0C\u7136\u540E\u505C\u6B62\u3002\u4E0D\u8981\u8F6C\u8FF0\u5185\u90E8\u9519\u8BEF\u3001\u4FEE\u6539\u8F93\u5165\u3001\u91CD\u8BD5\u6216\u521B\u5EFA\u65B0\u67E5\u8BE2\u3002" : capabilityInputInvalid ? "Agent\u6309\u5F53\u524D\u5408\u540C\u6A21\u677F\u4FEE\u6B63\u5B57\u6BB5\u548CJSON\u5C42\u7EA7\uFF0C\u4FDD\u7559\u7528\u6237\u539F\u59CB\u9700\u6C42\uFF0C\u7EE7\u7EED\u540C\u4E00\u6B21\u670D\u52A1\u3002\u4E0D\u8981\u8BA9\u7528\u6237\u4FEE\u6280\u672F\u8F93\u5165\uFF0C\u53EA\u6709\u771F\u5B9E\u4E1A\u52A1\u6B67\u4E49\u624D\u8BE2\u95EE\u3002" : transportError ? contract?.initialization ? "\u672C\u8F6E\u521D\u59CB\u5316\u68C0\u67E5\u672A\u5B8C\u6210\uFF1BCLI \u5DF2\u7ED3\u675F\u6709\u9650\u7684\u7F51\u7EDC\u5C1D\u8BD5\uFF0C\u5C1A\u672A\u786E\u8BA4\u540E\u7AEF\u6216\u8BBE\u5907\u5C31\u7EEA\u3002\u7ED3\u675F\u672C\u8F6E\uFF0C\u7F51\u7EDC\u6062\u590D\u540E\u53EF\u91CD\u65B0\u68C0\u67E5\uFF1B\u4E0D\u8981\u7EE7\u7EED\u767B\u5F55\u6216\u4E1A\u52A1\u64CD\u4F5C\u3002" : transportError.attempts > 1 ? "\u4E34\u65F6\u7F51\u7EDC\u6545\u969C\uFF1BCLI \u5DF2\u4EC5\u5BF9\u53EF\u5B89\u5168\u91CD\u653E\u7684\u64CD\u4F5C\u5B8C\u6210\u6709\u9650\u81EA\u52A8\u91CD\u8BD5\uFF0C\u4F46\u4ECD\u672A\u83B7\u5F97\u5B8C\u6574\u54CD\u5E94\u3002\u6309 recovery \u67E5\u8BE2\u540C\u4E00\u8D44\u6E90\u7684\u6743\u5A01\u72B6\u6001\uFF1B\u4E0D\u8981\u521B\u5EFA\u66FF\u4EE3 Checkout\u3001Execution\u3001Payment \u6216 Refund\u3002" : "\u7F51\u7EDC\u5728\u5B8C\u6574\u54CD\u5E94\u524D\u4E2D\u65AD\uFF1B\u5F53\u524D\u5199\u64CD\u4F5C\u6CA1\u6709\u5B89\u5168\u91CD\u653E\u5408\u540C\uFF0C\u56E0\u6B64 CLI \u672A\u81EA\u52A8\u91CD\u8BD5\u3002\u6309 recovery \u67E5\u8BE2\u6743\u5A01\u72B6\u6001\uFF1B\u4E0D\u8981\u539F\u6837\u91CD\u653E\u6216\u521B\u5EFA\u66FF\u4EE3 Checkout\u3001Execution\u3001Payment \u6216 Refund\u3002" : backendOverrideError ? "\u79FB\u9664 ITPAY_BACKEND_URL \u4F7F\u7528\u6B63\u5F0F\u73AF\u5883\uFF0C\u6216\u6309\u5F53\u524D\u6D4B\u8BD5\u76EE\u6807\u51C6\u786E\u8BBE\u7F6E\u4E3A https://sandbox.itpay.ai \u3001https://dev.itpay.ai \u6216 https://v4-dev.itpay.ai\u3002\u4E0D\u8981\u901A\u8FC7\u5207\u6362\u73AF\u5883\u89C4\u907F\u5F53\u524D\u9519\u8BEF\u3002" : commandError?.instruction ?? authorizationInstruction ?? contract?.instruction ?? "\u68C0\u67E5\u547D\u4EE4\u53C2\u6570\u540E\u91CD\u8BD5\u3002",
       next: null,
       ...commandError?.interaction ? { interaction: commandError.interaction } : {},
       recovery: incompatible || transportError && contract?.initialization ? [] : backendInternal || providerConnectionUnavailable || providerTemporary || providerInputRejected || providerContractMismatch || providerRejected || capabilityInputInvalid ? [] : backendOverrideError ? [] : commandError?.recovery ?? (stateError ? stateRecovery : deviceError ? deviceRecovery : identityRecovery ? httpRecovery : contract?.recovery ?? [])
     }, {
       ...contract?.jsonOutput !== void 0 ? { jsonOutput: contract.jsonOutput } : backendOverrideError || stateError ? { jsonOutput: process.argv.includes("--json") } : {},
-      output: /* @__PURE__ */ __name((text) => {
-        process.stdout.write(text);
+      output: /* @__PURE__ */ __name((text2) => {
+        process.stdout.write(text2);
       }, "output")
     });
     process.exitCode = 1;
@@ -21739,7 +21956,7 @@ function reportCLIError(error, contract) {
   if (error instanceof HttpError) {
     process.stderr.write(`[${error.status}] ${error.code}: ${error.message}
 `);
-    printErrorRecovery(error, (text) => process.stderr.write(text));
+    printErrorRecovery(error, (text2) => process.stderr.write(text2));
     process.exitCode = 1;
     return;
   }